<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="30165">
<package pkgid="ed31d8c59c8f0eae47f00815550a534b23e5d007d8c4cb067fdf48dbd33471d4" name="389-ds" arch="aarch64">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="dc1f671a64fd996226ca395bd119d8f86bc50fc8ec365a815963b5caba195ef0" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="c0961e4021d668f0aa1d94a080bbdd83b1bbeb63b8e8a7252f08ee43ef62c626" name="389-ds" arch="s390x">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="0fc4f48d3c4a114f020e0da7e8729638452f6995929b67cc102efba42ef89e5e" name="389-ds" arch="src">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="4f6341a519a6e8bde7521b8c20c0a27bdbc545c8666fd6bfabc5fbeb46419471" name="389-ds" arch="x86_64">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="72953be832d7619a3bd2dd45e203a437fc06589b4d33bd874930427837106f4d" name="389-ds" arch="aarch64">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="13daaa633d58966559bbe0d06033e64a73f732f1baec9037a310a7ce4a9d1211" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="86343ecb352d00eeb072473dfffc3f9377da1a7a413de48937c5d4f9cf877594" name="389-ds" arch="s390x">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="bc626c4c597c26588cd735deee5a61f42bb97c8d481b8289674f40377682fa7c" name="389-ds" arch="src">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="1bc916b460a7c3b67524d1d88f6b4df274f226145c188084ec7ff31364e06312" name="389-ds" arch="x86_64">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="5dd0e96e3724673ea1c2a3f9d59d887386997498100ae0b12d52a750d272bf52" name="389-ds" arch="aarch64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="d8e859b1f3e2eb7c2f1e335ffc9d447635d13db01202459a3c458b078d7afc43" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="67e4b8912a000aa59451c56912952a9159a080c217ea4d8d73e47331bdb5448a" name="389-ds" arch="s390x">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="22216433ce0755312c58398f580fdbb574aa5e0b804b0b29dbc76e457400aef3" name="389-ds" arch="src">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="95c5a61f491bf08d9ef6f74ffccd7388f737180894dbdfa3985b17eee201e739" name="389-ds" arch="x86_64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="7202c000b80c507a2a38a44efde914652b91dd1b83afdc2075b27e597c6cdab1" name="389-ds" arch="aarch64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="499873b803c6680ca2748c7f06cbd4b6835a3d7609ffc4d000a53ce697c4db7e" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="6f6f04dac89e6ca75658cf3861a01c7987fbffb04a516c26bf9fd27750dc702d" name="389-ds" arch="s390x">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="e1152dc0d5e9e71345e5486f30f16adafe7cd0b3ebf8b702eaa7a512a7708114" name="389-ds" arch="src">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="ff8ff3ce74db51368a6f10614bc5c0128efe37bb63f615e9b57515e450cb1c5f" name="389-ds" arch="x86_64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="c45a2d4dac5b6ad0593dfdd434c361eebe8270019df991aa253b9f2065f388a2" name="389-ds" arch="aarch64">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="de55d5b67ef96a130804eb9c9366affd72ac46c2def00d4ca262b860760b2c1a" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="418a5b67a3d52e4ceb1f27f251552e97b3bb6ba4818486e9a3d571bb22ae5424" name="389-ds" arch="s390x">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="7b696cb968d62c00cf5373cfebd89e1209e98209f7947642f56b1825b8825dd2" name="389-ds" arch="src">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="d2a8bc1a970b1a30c66d2818167dee5743e9065ae7ab191c907e389c59007598" name="389-ds" arch="x86_64">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="da301897963c96ac0b1570df28a4de6f59c6a408c4102b595ae2decbcf7bd4d9" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="45900e32311f522ff847ca6e546cbad8d582564ecbe19893f527eb6ebf33d7f4" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="4281a730f67a24049586c42bc1527f230df22f96c4570d5dddc9f946cf9d36b2" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="760a057b5bee1eb40cb6e0c46d7031516d10f8642b0a432fe35dc3aa2ecdfc46" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="84d0ea67124370200d535f4d10ce557004838e878eac38da0a866cc77f0da281" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="987263903bfd798822dc712f2f3d80092da78a97b2e2c9b593763ffb3f2b654b" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="ffa43dd902c11c48ee991718dfe6c4ee64e3961ba5a40df3f09825f8f1b89ce9" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="f9db2d51c06bcf6aeac6347b181828048597435577fa28d119a38d9ce09ccf7a" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="621c528472a9a51cc27a8f7c4e2d445609c14386f69cee410743632ac6e75452" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="9d267e6c17370d921d62347bed8e341d77521c9d0113977b17270559e9fa413a" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="cd0e8015c132f94def2485ea6670230571c1d6742910e10069bc1d2770d8a7d0" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="b310e7ce240bde75e048e03d3458922fd5a8956cc3261882f4d2d925deac2626" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="9db54611d14d42ca88fbf5d8fdafd3c3c2a3ef20862d36e9d6e17a9bc26a9e12" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="29f9db07c6765d6df0a90163927b6e1abd3d5110575c8c6bedee6ba05de66c6c" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="07f1358d4df2b968b531474d9611b43637d622d3adcbeb9a782a58c8a96f53c5" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="cf7c81a630af694328bf38a4283b6c61e81cf3948ce01c39fd7af8110214759d" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="e59d08a7abef78c1e9aa3ae5461ddab22f2aa40869151a0e80bc4aba4449b954" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="8f29e278b327c6b11b59df07cbabe1e131be89ce17f2b658bb02da2981806ca8" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="f26754aa0a4696bb5a64e8ad0e5742b06e3259d0077a5d5d843cb153ad71645a" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="701536afd02deeac1f8f05d52c68f4090a92c37d2f7c160c0a9e0f7ddaaa0c8f" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="688524d6c69f409b480cc3aa32198177f156d6e68668a0c322ca2b6ecb8dad96" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="1a48678dfb27da6128ac97c618be74631c5dd7e1a56bb63cf51d09445141090b" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="64c198e566d02cfe28c5a29463764930f96bc72e9cd16a64ca08915666c4314f" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="1c32fa3e7b7e1641ef15fea26f103aea64b25a22922db7f0efd95f2ca72c462e" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="2.0.15~git26.1ea6a6803" rel="150400.3.5.1"/>
  <changelog author="wbrown@suse.de" date="1610971200">- Upstream fix for bsc#1180847 - openldap_to_ds can fail if the
  backend has no overlays or indexes.
- Remove patches now merged upstream.
  * 0001-Ticket-51260-fix-potential-syncrepl-data-corruption.patch
  * 0002-Ticket-51260-improve-tests-and-improve-readme-re-ref.patch
  * 0003-Ticket-4224-openldap-can-become-confused-with-entryu.patch
  * 0004-Issue-4410-RFE-ndn-cache-with-arc-in-rust.patch
  * 0005-Issue-4403-RFE-OpenLDAP-pw-hash-migration-tests-4408.patch
  * 0006-Issue-4446-RFE-openldap-password-hashers.patch
  * 0007-Issue-4464-RFE-clang-with-ds-asan-rust.patch
  * 0008-Issue-4229-RFE-Improve-rust-linking-and-build-perfor.patch
- Update to version 1.4.4.10~git0.ebdf25251:
  * Bump version to 1.4.4.10
  * Issue 4418 - fix cherry-pick error
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)</changelog>
  <changelog author="wbrown@suse.de" date="1612353600">- Update to version 1.4.4.12~git0.7b681e1da:
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4396 - Minor memory leak in backend (#4558) (#4572)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Bump version to 1.4.4.11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)</changelog>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
</package>
<package pkgid="454ee8f60d3eeb150b158ee05862933f987519610128564d3af840f820adb767" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="4d567238a297dac75a05f49165c72d194f587796c953507805e31812df252fcd" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="8606e0d25dea1c3918900e7eb7f1ac4c50ebe3638624074e7a419252a4b18429" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="7ae04c967462791039fe55b458bab4b05473a78e1cf69fe7d9aadcb3d34e3e0c" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="2.0.16~git20.219f047ae" rel="150400.3.10.1"/>
  <changelog author="wbrown@suse.de" date="1613390400">- Update to version 389-ds-base-1.4.4.13~git0.6841d693f:
  * Bump version to 1.4.4.13
  * Update dscontainer (#4564)
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Bump version to 1.4.4.12
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)</changelog>
  <changelog author="wbrown@suse.de" date="1617105600">- bsc#1184142 - restart after openldap migration so that plugins can correctly
    perform data fix ups.
- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="wbrown@suse.de" date="1617883200">- Update to version 1.4.4.14~git0.37dc95673:
  * Bump version to 1.4.4.14
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin</changelog>
  <changelog author="william.brown@suse.com" date="1617883201">- bsc#1184476 - Add supportconfig utility for customer services to capture
  389-ds support information.</changelog>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
</package>
<package pkgid="ee449998e1dcb0c4aad077648c5416dcf80498625160ea147f3466c5ac55d103" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="2bb187d94453179932d20209971c929d4435e18d626e62b5145bdd6bb6b74f0c" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="29892f906a8cf59a482bce04ef62a75b5b3bea57cc07572543a713661ffc3e99" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="39e07e971b67d3f01d48d947cf6fea83c80d216d26d7da44c0725a32a3297f6d" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.15.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="2fb7ccba0ac9f693969ca318f941667a11f6b434b59fbbc9dd75af40ac55cc54" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="6c85c8a1a69479d563ff5d19f8f8457c8f8d33fdaab0d5f352510a6fe1514702" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="fee749f0ec4fe927b589070985c459c4f2174b9def35ee45093b1a1f73683095" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="6aa74c1859ab3032406af5a045ea976a0acfc5be80b92864eba501ca66e7a478" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="2.0.16~git56.d15a0a7" rel="150400.3.17.1"/>
  <changelog author="wbrown@suse.de" date="1625832000">- Update to version 1.4.4.16~git0.3d31c6c71:
  * Bump version to 1.4.4.16
  * Update npm packages
  * Issue 4719 - lib389 - fix dsconf passthrough auth bugs
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 3555 - Fix UI audit issue
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)</changelog>
  <changelog author="wbrown@suse.de" date="1625832001">- bsc#1188151 - Update to 1.4.4.16 patch release
- bsc#1188455 - CVE-2021-3652 - fix crypt handling of locked accounts
- Update to version 389dsbase1.4.4.16~git16.c1926dfc6:
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4656 - (2nd) Remove problematic language from UI/CLI/lib389
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4506 - Improve SASL logging
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4750 - Fix compiler warning in retrocl (#4751)</changelog>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
</package>
<package pkgid="a4b2f9f6a9aa70e9ba379fdf41ffebd291fbd5b3b68a6a92cbaef9d7a79108d1" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="d1a71ce2938f4febb25c4f9cc6d38d48064a4921e033cece7535be095f820cf7" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="abb6389299c79915f9acd5425be1ebb1b85678442f184b5b15df78da4ee8337d" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="2aa7d6ba2f372a97a869f336d6962fe0beab5b0db24e65d3fcd29dcf620a9eee" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="2.0.17~git7.959d36e" rel="150400.3.20.1"/>
  <changelog author="wbrown@suse.de" date="1632225600">- Update to version 1.4.4.17~git0.5e1e392ae:
  * Bump version to 1.4.4.17
  * Issue 4927 - rebase lib389 and cockpit in 1.4.4
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4169 - backport lib389 cert list fix
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks</changelog>
  <changelog author="william.brown@suse.com" date="1638187200">- jsc#SLE-22962 - submit 2.x version in preparation for BDB to LMDB transition
- Add missing dependency on iproute2 for lib389
- Update to version 2.0.10~git0.21dd2802c:
  * Bump version to 2.0.10
  * Issue 4908 - Updated several dsconf --help entries (typos, wrong descriptions, etc.)
  * Issue 4912 - Account Policy plugin does not set the config entry DN
  * Issue 4863 - typoes in logconv.pl
  * Issue 4796 - Add support for nsslapd-state to CLI &amp; UI
  * Issue 4894 - IPA failure in ipa user-del --preserve (#4907)
  * Issue 4912 - dsidm command crashing when account policy plugin is enabled
  * Issue 4910 - db reindex corrupts RUV tombstone nsuiqueid index
  * Issue 4869 - Fix retro cl trimming misuse of monotonic/realtime clocks
  * Issue 4887 - UI - fix minor regression from camelCase fixup
  * Bump version to 2.0.9
  * Issue 4887 - UI - Update webpack.config.js and package.json
  * Issue 4149 - UI - Migrate the remaining components to PF4
  * Issue 4875 - CLI - Add some verbosity to installer
  * Issue 4884 - server crashes when dnaInterval attribute is set to zero
- Update to version 2.0.8~git0.553f26c87:
  * Bump version to 2.0.8
  * Issue 4877 - RFE - EntryUUID to validate UUIDs on fixup (#4878)
  * Issue 4872 - BUG - entryuuid enabled by default causes replication issues (#4876)
  * Issue 4851 - Typos in "dsconf pwpolicy set --help" (#4867)
  * Issue 4763 - Attribute Uniqueness Plugin uses wrong subtree on ModRDN (#4871)
  * Issue 4736 - lib389 - fix regression in certutil error checking
  * Issue 4861 - Improve instructions in custom.conf for memory leak detection
  * Issue 4859 - Don't version libns-dshttpd
  * Issue 4169 - Migrate Replication &amp; Schema tabs to PF4
  * Issue 4623 - RFE - Monitor the current DB locks ( nsslapd-db-current-locks )
  * Issue 4736 - CLI - Errors from certutil are not propagated
  * Issue 4460 - Fix isLocal and TLS paths discovery (#4850)
  * Issue 4848 - Force to require nss version greater or equal as the version available at the build time
  * Issue - 4696 - Password hash upgrade on bind (#4840)
  * Bump version to 2.0.7
  * Issue 4443 - Internal unindexed searches in syncrepl/retro changelog
  * Issue 4603 - Reindexing a single backend (#4831)
  * Issue 4169 - UI - migrate Server Tab forms to PF4
  * Issue 4817 - BUG - locked crypt accounts on import may allow all passwords (#4819)
  * Issue 4820 - RFE - control flow integrity (#4821)
  * Issue 4706 - negative wtime for compare operations (#4780)
  * Issue 4414 - SIGFPE crash in rhds disk monitoring routine (#4829)
  * Issue 4262 - Fix Index out of bound in fractional test (#4828)
  * Issue 4826 - Filter argparse-manpage from autogenerated requires
  * Issue 4822 - Fix CI temporary password: fixture leftover breaks them (#4823)
  * Issue 2820 - Fix CI test suite issues
  * Bump version to 2.0.6
- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers
- Update to version 2.0.6~git0.d81dc6c90:
  * Bump version to 2.0.6
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions
  * Issue 4803 - Improve DB Locks Monitoring Feature Descriptions (#4810)
  * Issue 4169 - UI - Migrate Typeaheads to PF4 (#4808)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4788 - CLI should support Temporary Password Rules attributes (#4793)
  * Issue 4656 - Fix replication plugin rename dependency issues
  * Issue 4656 - replication name change upgrade code causes crash with dynamic plugins
  * Issue 4506 - Improve SASL logging
  * Issue 4709 - Fix double free in dbscan
  * Issue 4093 - Fix MEP test case
  * Issue 4747 - Remove unstable/unstatus tests (followup) (#4809)
  * Issue 4791 - Missing dependency for RetroCL RFE (#4792)
  * Issue 4794 - BUG - don't capture container output (#4798)
  * Issue 4593 - Log an additional message if the server certificate nickname doesn't match nsSSLPersonalitySSL value
  * Issue 4797 - ACL IP ADDRESS evaluation may corrupt c_isreplication_session connection flags (#4799)
  * Issue 4169 - UI Migrate checkbox to PF4 (#4769)
  * Issue 4447 - Crash when the Referential Integrity log is manually edited
  * Issue 4773 - Add CI test for DNA interval assignment
  * Issue 4789 - Temporary password rules are not enforce with local password policy (#4790)
  * Issue 4379 - fixing regression in test_info_disclosure
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4379 - Allow more than 1 empty AttributeDescription for ldapsearch, without the risk of denial of service
  * Issue 4575 Update test docstrings metadata
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
  * removed the snmp_present() from utils.py as we have get_rpm_version() in conftest.py
  * Issue 4753 - Adjust our tests to 389-ds-base-snmp missing in RHEL 9 Appstream
- Fix requires as openssl cli is required by 389-ds now.
- Add now working CONFIG parameter to sysusers generator
- Update to version 2.0.5~git0.607bfbf16:
  * Bump version to 2.0.5
  * Issue 4778 - RFE - Allow setting TOD for db compaction and add task
  * Issue 4169 - UI - Port plugin tables to PF4
  * Issue 4656 - Allow backward compatilbity for replication plugin name change
  * Issue 4764 - replicated operation sometime checks ACI (#4783)
  * Issue 2820 - Fix CI test suite issues
  * Issue 4781 - There are some typos in man-pages
  * Issue 4773 - Enable interval feature of DNA plugin
  * Issue 4623 - RFE - Monitor the current DB locks (#4762)
  * Issue 3555 - Fix UI audit issue
  * Issue 4725 - Fix compiler warnings
  * Issue 4770 - Lower FIPS logging severity
  * Issue 4765 - database suffix unexpectdly changed from .db to .db4 (#4766)
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4747 - Remove unstable/unstatus tests from PRCI (#4748)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4169 - UI - Migrate Buttons to PF4 (#4745)
  * Issue 4714 - dscontainer fails with rootless podman
  * Issue 4750 - Fix compiler warning in retrocl (#4751)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4169 - UI - Migrate Server, Security, and Schema tables to PF4
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723)
  * Issue 4740 - Fix CI lib389 userPwdPolicy and subtreePwdPolicy (#4741)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4734 - import of entry with no parent warning (#4735)
  * Issue 4729 - GitHub Actions fails to run pytest tests
  * Issue 4656 - Remove problematic language from source code
  * Issue 4632 - dscontainer: SyntaxWarning: "is" with a literal.
  * Issue 4169 - UI - migrate replication tables to PF4
  * Issue 4637 - ndn cache leak (#4724)
  * Issue 4577 - Fix ASAN flags in specfile
  * Issue 4169 - UI - PF4 migration - database tables
  * issue 4653: refactor ldbm backend to allow replacement of BDB - phase 3e - dbscan (#4709)
- Recommend openssl(cli) by lib389: admin tools like dscreate can
  call out to /usr/bin/openssl to manage certificates. As the admin
  could decide to manage the certificates differently, we only
  recommend openssl here.
- Update to version 389-ds-base-2.0.4~git0.7f6ba5a37:
  * Bump version to 2.0.4
  * Issue 4680 - 389ds coredump (@389ds/389-ds-base-nightly) in replica install with CA (#4715)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4713)
  * Issue 4700 - Regression in winsync replication agreement (#4712)
  * Issue 3965 - RFE - Implement the Password Policy attribute "pwdReset" (#4710)
  * Issue 4169 - UI - migrate monitor tables to PF4
  * issue 4585 - backend redesign phase 3c - dbregion test removal (#4665)
  * Issue 2736 - remove remaining perl references
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Issue 3585 - LDAP server returning controltype in different sequence
  * Issue 4127 - With Accounts/Account module delete fuction is not working (#4697)
  * Issue 4666 - BUG - cb_ping_farm can fail with anonymous binds disabled (#4669)
  * Issue 4671 - UI - Fix browser crashes
  * Issue 4169 - UI - Add PF4 charts for server stats
  * Issue 4648 - Fix some issues and improvement around CI tests (#4651)
  * Issue  4654  Updates to tickets/ticket48234_test.py  (#4654)
  * Issue 4229 - Fix Rust linking
  * Issue 4673 - Update Rust crates
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 4169 - UI - migrate modals to PF4
  * Issue 4656 - remove problematic language from ds-replcheck
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4661 - RFE - allow importing openldap schemas (#4662)
  * Issue 4659 - restart after openldap migration to enable plugins (#4660)
  * Merge pull request #4664 from mreynolds389/issue4663
  * issue 4552 - Backup Redesign phase 3b - use dbimpl in replicatin plugin (#4622)
  * Issue 4643 - Add a tool that generates Rust dependencies for a specfile (#4645)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4169 - UI - Migrate alerts to PF4
  * Issue 4169 - UI - Migrate Accordians to PF4 ExpandableSection
  * Issue 4595 - Paged search lookthroughlimit bug (#4602)
  * Issue 4169 - UI - port charts to PF4
  * Issue 2820 - Fix CI test suite issues
  * Issue 4513 - CI - make acl ip address tests more robust
  * Bump version to 2.0.3
  * Issue 4619 - remove pytest requirement from lib389
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Issue 4469 - Backend redesing phase 3a - implement dbimpl API and use it in back-ldbm (#4618)
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)
  * Issue 4469 - Backend redesign phase 3a - bdb dependency removal from back-ldbm
  * Update dscontainer (#4564)
  * Issue 4149 - UI - port TreeView and opther components to PF4
  * Issue 4577 - Add GitHub actions
  * Issue 4591 - RFE - improve openldap_to_ds help and features (#4607)
  * issue 4612 - Fix pytest fourwaymmr_test for non root user (#4613)
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4348 - Add tests for dsidm
  * Issue 4571 - Stale libdb-utils dependency
  * Issue 4600 - performance modify rate: reduce lock contention on the object extension factory (#4601)
  * Issue 4577 - Add GitHub actions
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4348 - Add tests for dsidm
  * Issue 4577 - Add GitHub actions
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4093 - fix compiler warnings and update doxygen
  * Issue 4575 - Update test docstrings metadata
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 4513 - Add DS version check to SSL version test (#4570)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4396 - Minor memory leak in backend (#4558)
  * Revert "Update metadata for customerscenario in test docstring"
  * Update metadata for customerscenario in test docstring
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4153 - Added a CI test (#4556)
  * Issue 4506 - BUG - fix oob alloc for fds (#4555)
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4506 - Temporary fix for io issues (#4516)
  * Issue 4535 - lib389 - Fix log function in backends.py
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Issue 4544 - Compiler warnings on krb5 functions (#4545)
  * Update rpm.mk for RUST tarballs
- small spec cleanup
- As there is no python-* package, the direct use of singlespec
  seems unapplicable. So do not build for all python3.x flavors,
  but only for the main one:
  + Use releavant %python3_ macros.
  + Do not use %python_module, as this pulls in all python
    versions.
- Update to version 2.0.2~git0.6d17ca7df:
  * Bump version to 2.0.2
  * Issue 4539 - BUG - no such file if no overlays in openldap during migration (#4540)
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4535 - lib389 - healthcheck throws exception if backend is not replicated
  * Issue 4537 - Use KRB5_CLIENT_KTNAME for client keytabs (#4523)
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4219 - Log internal unindexed searches (notes=A)
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4381 - RFE - LDAPI authentication DN rewritter
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4517 - BUG: Multiple systemd pin warnings (#4518)
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4498 - BUG - entryuuid replication may not work (#4503)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 3522 - Remove DES to AES conversion code
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN) (#4493)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4224 - cleanup specfile after libsds removal
  * Issue 4421 - Unable to build with Rust enabled in closed environment
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4229 - RFE - Improve rust linking and build performance (#4474)
  * Ticket 4224 - openldap can become confused with entryuuid
  * Ticket 4313 - improve tests and improve readme re refdel
  * Ticket 4313 - fix potential syncrepl data corruption
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Issue 4446 RFE - openldap password hashers
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466) (#4466)
  * Issue 4464 - RFE - clang with ds+asan+rust
  * Issue 4105 - Remove python.six (fix regression)
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 4454 - RFE - fix version numbers to allow object caching
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set
  * Issue 4297 - 2nd fix for on ADD replication URP issue internal searches with filter containing unescaped chars (#4439)
  * Issue 4112 - Added a CI test (#4441)
  * Issue 4449 - dsconf replication monitor fails to retrieve database RUV - consumer (Unavailable) (#4451)
  * Issue 4105 - Remove python.six from lib389 (#4456)
  * Fix pytest test collection
  * Issue 4440 - BUG - ldifgen with --start-idx option fails with unsupported operand (#4444)
  * Issue 4410 RFE - ndn cache with arc in rust
  * Issue 4373 - BUG - Mapping Tree nodes can be created that are invalid
  * Issue 4428 - BUG Paged Results with critical false causes sigsegv in chaining
  * Issue 4428 - Paged Results with Chaining Test Case
  * do not add referrals for masters with different data generation #2054 (#4427)
  * Issue 4383 - Do not normalize escaped spaces in a DN
  * Issue 4432 - After a failed online import the next imports are very slow
  * Issue 4316 - performance search rate: useless poll on network send callback (#4424)
  * Issue 4281 - dsidm user status fails with Error: 'nsUserAccount' object has no attribute 'is_locked'
  * Issue 4429 - NULL dereference in revert_cache()
  * Issue 4412 - Fix CLI repl-agmt requirement for parameters (#4422)
  * Issue 4407 RFE - remove http client and presence plugin (#4409)
  * build problems at alpine linux
  * Issue 4415 - unable to query schema if there are extra parenthesis
- Rust is a hard-requirement of 2.0.0 series, so enable-rust flags removed
- Perl has been completly removed in 2.0.0, enable-perl removed and lib389
  is the default. Perl tools have not been included in SUSE since 1.4.1.x
- Update to version 2.0.1~git0.b557f5daa:
  * Bump version to 2.0.1
  * Issue 4420 - change NVR to use X.X.X instead of X.X.X.X
  * Issue 4391 - DSE config modify does not call be_postop (#4394)
  * Issue 4218 - Verify the new wtime and optime access log keywords (#4397)
  * Issue 4176 - CL trimming causes high CPU
  * ticket 2058: Add keep alive entry after on-line initialization - second version (#4399)
  * Issue 4403 RFE - OpenLDAP pw hash migration tests (#4408)
  * Bump version to 2.0.0</changelog>
  <changelog author="william.brown@suse.com" date="1641816000">- Update to version 2.0.11~git13.e14935725:
  * Issue 5080 - BUG - multiple index types not handled in openldap migration (#5094)
  * Issue 5079 - BUG - multiple ways to specific primary (#5087)
  * Issue 4992 - BUG - slapd.socket container fix (#4993)
  * Issue 5037 - in OpenQA changelog trimming can crashes (#5070)
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 4962 - Fix various UI bugs - Database and Backups (#5044)
  * Issue 5046 - BUG - update concread (#5047)
  * Issue 5043 - BUG - Result must be used compiler warning (#5045)
  * Issue 4165 - Don't apply RootDN access control restrictions to UNIX connections
  * Issue 4931 - RFE: dsidm - add creation of service accounts
  * Issue 5024 - BUG - windows ro replica sigsegv (#5027)
  * Issue 5020 - BUG - improve clarity of posix win sync logging (#5021)
  * Issue 5008 - If a non critical plugin can not be loaded/initialized, bootstrap should succeeds (#5009)
  * Issue 4962 - Fix various UI bugs - Settings and Monitor (#5016)
  * Issue 5014 - UI - Add group creation to LDAP editor
  * Issue 5006 - UI - LDAP editor tree not being properly updated
  * Issue 5001 - Update CI test for new availableSASLMechs attribute
  * Issue 4959 - Invalid /etc/hosts setup can cause isLocalHost to fail.
  * Issue 5001 - Fix next round of UI bugs:
  * Issue 4962 - Fix various UI bugs - dsctl and ciphers (#5000)
  * Issue 4978 - use more portable python command for checking containers
  * Issue 4678 - RFE automatique disable of virtual attribute checking (#4918)
  * Issue 4972 - gecos with IA5 introduces a compatibility issue with previous (#4981)
  * Issue 4978 - make installer robust
  * Issue 4976 - Failure in suites/import/import_test.py::test_fast_slow_import
  * Issue 4973 - update snmp to use /run/dirsrv for PID file
  * Issue 4962 - Fix various UI bugs - Plugins (#4969)
  * Issue 4973 - installer changes permissions on /run
  * Issue 4092 - systemd-tmpfiles warnings
  * Issue 4956 - Automember allows invalid regex, and does not log proper error
  * Issue 4731 - Promoting/demoting a replica can crash the server
  * Issue 4962 - Fix various UI bugs part 1
  * Issue 3584 - Fix PBKDF2_SHA256 hashing in FIPS mode (#4949)
  * Issue 4943 - Fix csn generator to limit time skew drift (#4946)
  * Issue 2790 - Set db home directory by default
  * Bump github contianer shm size to 4 gigs
  * Issue 4299 - Merge LDAP editor code into Cockpit UI
  * Issue 4938 - max_failure_count can be reached in dscontainer on slow machine with missing debug exception trace
  * Issue 4921 - logconv.pl -j: Use of uninitialized value (#4922)
  * Issue 4847 - BUG - potential deadlock in replica (#4936)
  * Issue 4513 - fix ACI CI tests involving ip/hostname rules
  * Issue 4925 - Performance ACI: targetfilter evaluation result can be reused (#4926)
  * Issue 4916 - Memory leak in ldap-agent</changelog>
  <changelog author="william.brown@suse.com" date="1641816001">- Resolve boo#1194068 by adding required schema
- Add missing support utils plugin</changelog>
  <changelog author="william.brown@suse.com" date="1643112000">- Update to version 2.0.13~git1.72eb93ac9:
  * Issue 5129 - BUG - Incorrect fn signature in add_index (#5130)
  * Bump version to 2.0.13
  * Issue 5132 - Update Rust crate lru to fix CVE
  * Issue 3555 - UI - fix audit issue with npm nanoid
  * Issue 4299 - UI - Add ACI editing features
  * Issue 4299 - UI LDAP editor - add "edit" and "rename" functionality
  * Issue 5127 - run restorecon on /dev/shm at server startup
  * Issue 5124 - dscontainer fails to create an instance
  * Issue 4312 - fix compiler warning
  * Issue 5115 -  AttributeError: type object 'build_manpages' has no attribute 'build_manpages'</changelog>
  <changelog author="william.brown@suse.com" date="1645531200">- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1645531201">- fixes bsc#1196425
- jsc#SLE-22585 - Support running with bare uid/gid (non-root) in containers.
- Update to version 2.0.14~git12.d04ffd4b6:
  * Issue 5102 - BUG - container may fail with bare uid/gid (#5140)
  * Issue 5137 - RFE - improve sssd conf output (#5138)
  * Issue 5145 - Fix covscan errors
  * Issue 4721 - UI - attribute uniqueness crashes UI when there are no configs
  * Issue 5155 - RFE - Provide an option to abort an Auto Member rebuild task
  * Issue 4299 - UI - Add Role funtionality (#5163)
  * Issue 5050 - bdb bulk op fails if fs page size &gt; 8K (#5150)
  * Issue 4775 - Add entryuuid CLI and Fixup (#4776)
  * Issue 5142 - CLI - dsctl dbgen is broken
  * Issue 4299 - UI - fix minor issues with ldap editor (table view)</changelog>
  <changelog author="william.brown@suse.com" date="1647950400">- Resolve bsc#1197345 - CVE-2022-0996 - Mishandling of password expiry
- Update to version 2.0.14~git25.e6431d959:
  * Issue 5221 - User with expired password can still login with full privledges
  * Issue 5218 - double-free of the virtual attribute context in persistent search (#5219)
  * Issue 5200 - dscontainer should use environment variables with DS_ prefix
  * Issue 5193 - Incomplete ruv occasionally returned from ruv search (#5194)
  * Issue 5189 - memberOf plugin exclude subtree not cleaning up groups on modrdn
  * Issue 5188 - UI - LDAP editor - add entry and group types
  * Issue 5184 - memberOf does not work correctly with multiple include scopes
  * Issue 5162 - BUG - error on importing chain files (#5164)
  * Issue 5186 - UI - Fix SASL Mapping regex validation and other minor improvements
  * Issue 5048 - Support for nsslapd-tcp-fin-timeout and nsslapd-tcp-keepalive-time (#5179)</changelog>
  <changelog author="william.brown@suse.com" date="1648728000">- Resolve bsc#1197275 - CVE-2022-0918 - Crafted message may cause DoS
- Update to version 2.0.15~git4.f46ab49c9:
  * Issue 5242- Craft message may crash the server (#5243)
  * Issue 5234 - UI - rename Users and Groups tab
  * Issue 5217 - Simplify instance creation and administration by non root user (#5224)
  * Issue 5227 - UI - No way to move back to Get Started step (#5233)
  * Bump version to 2.0.15
  * Issue 5230 - Race condition in RHDS disk monitoring functions
  * Issue 4299 - UI - Add CoS funtionality (#5196)
  * Issue 5225 - UI - impossible to manually set entry cache
  * Issue 5186 - UI - Fix SASL Mapping regex test feature
  * Issue 5221 - User with expired password can still login with full privledges</changelog>
  <changelog author="william.brown@suse.com" date="1651579200">- Resolve bsc#1199008 - An incorrectly backported fix would cause dscontainer not to start
  due to a missing function definition
- Update to version 2.0.15~git17.498ec3e93:
  * Issue 5273 - CLI - add arg completer for instance name
  * Issue 2893 - CLI - dscreate - add options for setting up replication
  * Issue 4866 - CLI - when enabling replication set changelog trimming by default
  * Issue 5241 - UI - Add account locking missing functionality (#5251)
  * Issue 5180 - snmp_collator tries to unlock NULL mutex (#5266)
  * Issue 5098 - Fix cherry-pick error
  * Fix cherry-pick error
  * Issue 4904 - Fix various small issues
  * Issue 5260 - BUG - OpenLDAP allows multiple names of memberof overlay (#5261)
  * Issue 5252 - During DEL, vlv search can erroneously return NULL candidate (#5256)
  * Issue 5210 - Python undefined names in lib389
  * Issue 4959 - BUG - Invalid /etc/hosts setup can cause isLocalHost (#4960)
  * Issue 5249 - dscontainer: ImportError: cannot import name 'get_default_db_lib' from 'lib389.utils'</changelog>
  <changelog author="william.brown@suse.com" date="1653998400">- bsc#1199889 - CVE-2022-1949 - full access control bypass with simple crafted query, resolved
  by Issue 5170.
- Update to version 2.0.15~git26.1ea6a6803:
  * Issue 5302 - Release tarballs don't contain cockpit webapp
  * Issue 5237 - audit-ci: Cannot convert undefined or null to object
  * Issue 5170 - BUG - ldapsubentries were incorrectly returned (#5285)
  * Issue 4970 - Add support for recursively deleting subentries
  * Issue 5284 - Replication broken after password change (#5286)
  * Issue 5291 - Harden ReplicationManager.wait_for_replication (#5292)
  * Issue 5279 - dscontainer: TypeError: unsupported operand type(s) for /: 'str' and 'int'
  * Issue 5170 - RFE - Filter optimiser (#5171)
  * Issue 5276 - CLI - improve task handling
  * Issue 5273 - CLI - add arg completer for instance name</changelog>
  <changelog author="william.brown@suse.com" date="1654689600">- Changelog fix - bsc#1195324 - CVE-2021-4091 - double free in psearch</changelog>
  <changelog author="william.brown@suse.com" date="1659441600">- bsc#1197998 - Update sudoers schema to support UTF-8
- Update to version 2.0.16~git9.e2a858a86:
  * Issue 5386 - BUG - Update sudoers schema to correctly support UTF-8 (#5387)
  * Issue 5383 - UI - Various fixes and RFE's for UI
  * Issue 4656 - Remove problematic language from source code
  * Issue 5380 - Separate cleanAllRUV code into new file
  * Issue 5322 - optime &amp; wtime on rejected connections is not properly set
  * Issue 5375 - CI - disable TLS hostname checking
  * Issue 5373 - dsidm user get_dn fails with search_ext() argument 1 must be str, not function
  * Issue 5371 - Update npm and cargo packages
  * Issue 3069 - Support ECDSA private keys for TLS (#5365)
  * Bump version to 2.0.16</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- bsc#1202470 - CVE-2022-2850 - Resolve sync repl crash during invalid cookie handling
- Update to version 2.0.16~git20.219f047ae:
  * Issue #5423 - Fix missing 'not' in description
  * Issue 5421 - CI - makes replication/acceptance_test.py::test_modify_entry more robust (#5422)
  * Issue 3903 - fix repl keep alive event interval
  * Issue 5418 - Sync_repl may crash while managing invalid cookie (#5420)
  * Issue 5415 - Hostname when set to localhost causing failures in other tests
  * Issue 5412 - lib389 - do not set backend name to lowercase
  * Issue 3903 - keep alive update event starts too soon
  * Issue 5397 - Fix various memory leaks
  * Issue 5399 - UI - LDAP Editor is not updated when we switch instances (#5400)
  * Issue 3903 - Supplier should do periodic updates</changelog>
  <changelog author="william.brown@suse.com" date="1664193600">- bsc#1194119 - CVE-2021-45710 - tokio data race with memory corruption
- Update to version 2.0.16~git37.9a47b3d2:
  * Revert "Issue 5446 - Fix some covscan issues (#5451)"
  * Issue 5254 - dscreate create-template regression due to 5a3bdc336 (#5255)
  * Issue 5271 - Serialization of pam_passthrough causing high etimes (#5272)
  * Issue 5453 - UI/CLI - Changing Root DN breaks UI
  * Issue 5446 - Fix some covscan issues (#5451)
  * Issue 5294: Report Portal 5 is not processing an XML file with (#5358)
  * Issue 4588 - Gost yescrypt may fail to build on some older versions of glibc
  * Issue 4308 - checking if an entry is a referral is expensive
  * Issue 5447 - UI - add NDN max cache size to UI
  * Issue 5443 - UI - disable save button while saving
  * Issue 5077 - UI - Add retrocl exclude attribute functionality (#5078)</changelog>
  <changelog author="william.brown@suse.com" date="1666353600">- bsc#1204493 - Improve reliability of migrations from openldap when dynamic directory services
  is configured.
- Update to version 2.0.16~git52.76ecbe1:
  * Issue 5495 - RFE - skip dds during migration. (#5496)
  * Issue 5491 - UI - Add rework and finish jpegPhoto functionality (#5492)
  * Issue 5368 - Retro Changelog trimming does not work (#5486)
  * Issue 5487 - Fix various issues with logconv.pl
  * Issue 5482 - lib389 - Can not enable replication with a mixed case suffix
  * Issue 4776 - Fix entryuuid fixup task (#5483)
  * Issue 5356 - Update Cargo.lock and bootstrap PBKDF2-SHA512 (#5480)
  * Issue 3061 - RFE - Add password policy debug log level
  * Issue 5462 - RFE - add missing default indexes (#5464)
  * Issue 4324 - Revert recursive pthread mutex usage in factory.c</changelog>
  <changelog author="william.brown@suse.com" date="1666958400">- bsc#1204748 - Resolve issue with checklist post migration when dds is present
- Update to version 2.0.16~git53.f06a9b5:
  * Issue 5495 - BUG - Minor fix to dds skip, inconsistent attrs caused errors (#5501)</changelog>
  <changelog author="william.brown@suse.com" date="1667995200">- bsc#1205146 - failure to migrate from openldap if pwdPolicyChecker present
- Update to version 2.0.16~git56.d15a0a7:
  * Issue 5512 - BUG - skip pwdPolicyChecker OC in migration (#5513)
  * Issue 5429 - healthcheck - add checks for MemberOf group attrs being indexed
  * Issue 5502 - RFE - Add option to display entry attributes in audit log</changelog>
  <changelog author="william.brown@suse.com" date="1669204800">- Update to version 2.0.17~git4.9447f5f:
  * Issue 5541 - Fix typo in `lib389.cli_conf.backend._get_backend` (#5542)
  * Issue 5539 - Make logger's parameter name unified (#5540)
  * Bump VERSION.sh to 2.0.17
  * Issue 5534 - Fix a rebase typo (#5537)
  * Bump version ot 2.0.17
  * Issue 5534 - Add copyright text to the repository files
  * Issue 5532 - Make db compaction TOD day more robust.
  * Issue 5529 - UI - Fix npm vulnerability in loader-utils
  * Issue 3555 - UI - fix audit issue with npm loader-utils (#5514)
  * Issue 5162 - Fix dsctl tls ca-certfiicate add-cert arg requirement
  * Issue 5162 - RFE - CLI allow adding CA certificate bundles
  * Issue 5440 - memberof is slow on update/fixup if there are several 'groupattr' (#5455)</changelog>
  <changelog author="william.brown@suse.com" date="1670328000">- bsc#1205974 - support pam_saslauthd for authentication pass through
  requirements. See also jsc#PED-2701
- Update to version 2.0.17~git7.959d36e:
  * Issue 5521 - RFE - split pass through auth cli
  * Issue 5521 - BUG - Pam PTA multiple issues
  * Issue 5544 - Increase default task TTL</changelog>
</package>
<package pkgid="c7e99e56b473b1dc29238a3a99ecf55b39d11bf1b340b66a730119bcd6abe578" name="AppStream" arch="aarch64">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="57f8f4bf14f910393690ef5c0df398812b5e4066312186fe52f1f3aaaa042fa2" name="AppStream" arch="ppc64le">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="a791e8fb7858a9993ccba399d3a8a9ec1fa67f31077050532f55ee3f3c01edf7" name="AppStream" arch="s390x">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="ef07d6d4bcc3cbd64752eb626dc213c5e45aa7ea50ebdc8dd43c0158e695969e" name="AppStream" arch="src">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="07c7b1c2ff2216964c0778154e604fcef8401f04f45658cc0864557a122547ff" name="AppStream" arch="x86_64">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="67dcbb607e2c2e92b27a034d3b571e831396c9b7950441ebb64d71e052f9809d" name="AppStream-devel" arch="aarch64">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="5674591096b5933d8016536106db0d80f1e74f173a6eda77a2f025e430d90dec" name="AppStream-devel" arch="ppc64le">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="31f95891adae7a80c70e5a12a3957d269cf82d9d5cf6bb93c0a2a63851d48de9" name="AppStream-devel" arch="s390x">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="3773313a6bd9aa4d57f167717de7609296d957b63ca380bb595842613ad44e4c" name="AppStream-devel" arch="x86_64">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="cd4473f50029a6191071b36aa49510643997a292e959d3772f828acbaf0e257f" name="AppStream-doc" arch="aarch64">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="64fb842b6a94fa9678605aaaaae85b7a1f2aef822ee2b583e85ef968817cb427" name="AppStream-doc" arch="ppc64le">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="6b32ba2832cac2cc8ddce2742e26e9ed719bac7b6f92f21789227b584fc4aec0" name="AppStream-doc" arch="s390x">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="025b276e1cdb495ef83a37daf9b9ac5295b9b86b954f7979c2fda89a375f0ebf" name="AppStream-doc" arch="x86_64">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="22b97edfb860065ae57c33ac3d5168077e7b839da26fa75242aa5df1c8707e02" name="AppStream-lang" arch="noarch">
  <version epoch="0" ver="0.15.1" rel="150400.3.2.3"/>
  <changelog author="alarrosa@suse.com" date="1517227200">- Now the appstream cache is refreshed in %post. The update to 0.11.8
  plus the refresh fixes kde#389531.
- Headers are now installed to /usr/include/appstream instead of
  /usr/inlude/AppStream
- New package AppStream-doc with the html documentation for AppStream
- Use meson to build instead of cmake
- Update to version 0.11.8:
  Features:
  * validator: Emit a hint in case a discouraged AppStream ID style is used (Matthias Klumpp)
  * l10n: Renamed Norwegian Bokmål language file (Matthias Klumpp)
  Specification:
  * docs: Add quickstart instructions for intltool (David Steele)
  * spec: Discourage use of hyphens and digit-started segments for IDs (Matthias Klumpp)
  Bugfixes:
  * qt: Export the AppStreamQt target (Aleix Pol)
  * Various string improvements (Allan Nordhøy)
  * validator: Don't make HEAD requests for URL checks, fetch first byte instead (Matthias Klumpp)
  * Enforce a non-broken version of gobject-introspection (Matthias Klumpp)
  * Ensure LINGUAS update is only run explicitly (Matthias Klumpp)
  * Fix a minor memory and fd leak (Matthias Klumpp)
- Update to version 0.11.7:
  Notes:
  * The appstreamcli validation commands now use curl if it is available to check all
    URLs in the metadata for existence.
    If you don't want this behavior, pass "--nonet" to appstreamcli. There might also
    be false positives (one is known with the KDE bugtracker) that need to be investigated,
    so feedback on this new feature is welcome.
  Features:
  * validator: Check all urls for validity (Matthias Klumpp)
  * validator: Check web-application components for missing tags (Matthias Klumpp)
  * Add API to retrieve the AppStream library version (Matthias Klumpp)
  * apt: Allow fetching 128x128@2 HiDPI icons (Rico Tzschichholz)
  Specification:
  * Add the "url" launchable type (Dimitrios Christidis)
  * spec: Clarify some icon details in the collection data (Marius Vollmer)
  * spec: Allow &lt;icon&gt; tags in generic components (Marius Vollmer)
  * spec: Specify the web-application component type (Matthias Klumpp)
  Bugfixes:
  * Fix endless loop when validating screenshots (Matthias Klumpp)
  * ascli: Show a list of component-types when --help is passed to new-template (Matthias Klumpp)
  * validator: Drop the wget fallback, making missing curl only an info (Matthias Klumpp)
  * meson: Properly define header-file in gir (Rico Tzschichholz)
- Update to version 0.11.6:
  Features:
  * Improve screenshot validation (Matthias Klumpp)
  * Allow to disable introspection (Matthias Klumpp)
  Bugfixes:
  * Revert back to the old build option names (Matthias Klumpp)
  * Apply maintainer flags equally to C++ and C (Matthias Klumpp)
  * Explicitly set C/C++ standard versions (Matthias Klumpp)
  * vapi: Include the right header (Matthias Klumpp)
  * xml: Correctly write screenshots tag again (Matthias Klumpp)
  * Do not cache a screenshot that doesn't have images (Matthias Klumpp)
  * xml: Support legacy screenshot tags again (Matthias Klumpp)
- Update to version 0.11.5:
  Features:
  * Restructure build feature flags (Matthias Klumpp)
  * Allow disabling API documentation build (Matthias Klumpp)
  Bugfixes:
  * qt: Don't check bitness when finding AppStreamQt (Matthias Klumpp)
- Update to version 0.11.4:
  Notes:
  * This release switches the build system from CMake to Meson. You will need
    Meson (&gt;= 0.42) in order to build AppStream. Please test for any regressions.
  Features:
  * Implement Meson support (Matthias Klumpp)
  * meson: Make build with sanitizers (partially) work again (Matthias Klumpp)
  * meson: Add helper script for building documentation (Matthias Klumpp)
  * docs: Always rebuild documentation on-demand (Matthias Klumpp)
  * Update README for Meson (Matthias Klumpp)
  * Implement cockpit-manifest launchable type (Matthias Klumpp)
  * validator: Actually validate the type property of "launchable" tags (Matthias Klumpp)
  * Allow to search the pool for components that provide a launchable (Matthias Klumpp)
  * qt: Add new function to search components by launchable (Matthias Klumpp)
  Specification:
  * spec: New "cockpit-manifest" launchable type (Marius Vollmer)
  Bugfixes:
  * validator: Complain if a component has no ID (Matthias Klumpp)
- Update to version 0.11.3:
  Bugfixes:
  * qt: Don't crash when an error is found and no error string is passed (Aleix Pol)
  * Propagate document context to the context object for XML files (Matthias Klumpp)
  * validator: Correctly recognize "launchable" as valid tag (Matthias Klumpp)
- Update to version 0.11.2:
  Features:
  * cache: Refactor cache functions (Matthias Klumpp)
  * Deduplicate origin/locale/arch with AsContext (Matthias Klumpp)
  * Get rid of a couple of internal helper methods (Matthias Klumpp)
  * cli: When using convert, always assume collection style for YAML (Matthias Klumpp)
  Specification:
  * Adjust docs to clearly state that licenses are SPDX expressions (Harald Sitter)
  Bugfixes:
  * qt: Improve Icon QDebug information (Aleix Pol)
  * Resolve crash when serializing lots of XML documents (Matthias Klumpp)
  * xml: Don't truncate translated entries after encounting a wrong locale (Matthias Klumpp)
  * Set a real locale if locale is set to "ALL" (Matthias Klumpp)
  * validator: Make ending dot in component name only a pedantic issue (Matthias Klumpp)
- Add patch to export the AppStreamQt target correctly:
  * 0001-Fix-regression-from-153.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518350400">- appstreamcli can use curl for some checks, so recommend it (boo#1080446)</changelog>
  <changelog author="kbabioch@suse.com" date="1527076800">- Use OpenPGP signature provided upstream
- Added AppStream.keyring, which contains the key from the author
- Use %license macro for license files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1539691200">- Update to 0.12.2:
  * Fix a couple of incorrect g_ptr_array_unrefs (Iain Lane)
  * Use autofree functions instead of freeing resources
    explicitly (Matthias Klumpp)
  * Add missing const (Matthias Klumpp)
  * Ensure we don't produce a .pc file with unnecessary
    Requires.private lines (Matthias Klumpp)
  * Stop leaking local GVariantDict instance contents (Phil Miller)
  * Drop leaked references to container items (Phil Miller)
- Update to 0.12.1:
  Features:
  * ascli: Add command to compare version numbers (Matthias Klumpp)
  * yaml: Allow reading multiple localized strings from YAML data
  (Matthias Klumpp)
  * yaml: Always include the untranslated strings (Matthias Klumpp)
  * Allow to ignore media_baseurl when parsing metadata (Matthias Klumpp)
  * xml: Add implementation of the agreement tag (Matthias Klumpp)
  * Add new "repository" component type (Matthias Klumpp)
  * yaml: Implement Agreements field (Matthias Klumpp)
  * cache: Implement support for agreements (Matthias Klumpp)
  * tests: Improve cache data tests, add agreement tag test (Matthias Klumpp)
  * Use gperf for perfect hash generation for some tags (Matthias Klumpp)
  * tests: Add rundimentary performance test (Matthias Klumpp)
  * its: Mark agreement sections as translatable (Matthias Klumpp)
  * qt: Add support for service/repository component types (Matthias Klumpp)
  Specification:
  * docs: Describe the custom tag (Matthias Klumpp)
  * spec: Describe the new agreement tag (Matthias Klumpp)
  * docs: Clarify that the /usr/share/appdata/ path is legacy and should
    not be used (Matthias Klumpp)
  Bugfixes:
  * its: Allow translation of release descriptions (Marc J)
  * Load data from desktop files properly again (Matthias Klumpp)
  * Update desktop-environment list (Matthias Klumpp)
  * qt: Don't warn about inlining in maintainer mode (Matthias Klumpp)
- Update to 0.12.0:
  Features:
  * Implement release types (Matthias Klumpp)
  * qt: Support release types (Matthias Klumpp)
  * Update static data lists (Matthias Klumpp)
  * Make as_str_replace use as_gstring_replace internally (Matthias Klumpp)
  * spdx: Add some compatibility workarounds for SPDX 3.0 (Matthias Klumpp)
  * validator: Validate SPDX license expressions for metadata_license (Matthias Klumpp)
  * apt: Add config snippets to enable icon downloads (Matthias Klumpp)
  * yaml: Ensure all string values have whitespaces stripped (Matthias Klumpp)
  * Make as_component_get_launchables public API (Matthias Klumpp)
  * Implement support for requires/recommends (Matthias Klumpp)
  * Add recommends/requires data to the cache (Matthias Klumpp)
  * Add a quick way to check if a version satisfies an AsRelation requirement (Matthias Klumpp)
  * ascli: Properly document the --no-net flag (Matthias Klumpp)
  * ascli: Allow to disable network acces via an environment variable (Matthias Klumpp)
  * apt: Support 48x48px icons (Matthias Klumpp)
  * yaml: Make Requires/Recommends data more compact and easier to emit (Matthias Klumpp)
  * validator: Validate requires/recommends tags (Matthias Klumpp)
  * Default to format version 0.12 (Matthias Klumpp)
  Specification:
  * spec: Add a "type" property to &lt;release/&gt; tag. (Jehan)
  * spec: Initial draft for requires/recommends (Matthias Klumpp)
  * spec: Document the YAML Rquires/Recommends fields (Matthias Klumpp)
  * spec: Clarify that the memory requirement uses MiB as unit (Matthias Klumpp)
  Bugfixes:
  * qt: Implement missing constructors (Aleix Pol)
  * apt: escape the icon scale factor as it is using the arobase character (Corentin Noël)
  * Check plain language string in as_component_localized_get as well (Antonio Rojas)
  * qt: Define location and soname for all configurations, not just Debug (Gabriel Souza Franco)
  * Never override high-quality data with incomplete .desktop data (Matthias Klumpp)
  * Make data update script work with recent SPDX (Matthias Klumpp)
  * Add a timeout to URL validity checks (Matthias Klumpp)
- Remove patches, now upstream:
  * 0001-Fix-regression-from-153.patch
- Add patch to fix assertion failure on cache refresh (boo#1105691):
  * explicit-variant-types.patch
- Add patch to fix build on Leap:
  * workaround-hidden-symbols.patch
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1551700800">- Update to 0.12.6:
  Features:
  * Implement artifacts (Matthias Klumpp)
  * Search improvements (Matthias Klumpp)
  Specification:
  * doc: help distinguish the 2 'languages' tags (Beuc)
  * spec: Document the new artifacts tag (Matthias Klumpp)
- Update to 0.12.5:
  Features:
  * qt: expose the spdx parser to Qt users (Aleix Pol)
  * Implement operating-system component and add convenience functions (Matthias Klumpp)
  * qt: Add operating-system component type and a few utility functions (Matthias Klumpp)
  * Allow fetching the ISO8601 date directly alongside the timestamp in AsRelease (Matthias Klumpp)
  * Implement date_eol for AsRelease (Matthias Klumpp)
  * Add convenience methods for retrieving date_eol as UNIX timestamp (Matthias Klumpp)
  * qt: Allow retrieving the EOL timestamp for releases (Matthias Klumpp)
  * Implement new release details URL (Matthias Klumpp)
  * Make rDNS conversion function more generic and add more extensive tests (Matthias Klumpp)
  Specification:
  * docs: &lt;release&gt; tag can have details url (Jehan)
  * spec: Specify the operating-system component (Matthias Klumpp)
  * spec: Specify date_eol for releases (Matthias Klumpp)
  * docs: Explicitly state list items are allowed in ol/ul lists (Matthias Klumpp)
  Bugfixes:
  * Don't warn about issues in a cache refresh if there weren't any (Matthias Klumpp)
  * Ensure releases are always sorted in descending order (Matthias Klumpp)
  * pool: Fix g-i for get_components_*() while GPtrArray owns its elements (Rico Tzschichholz)
- Update to 0.12.4:
  Features:
  * pool: Be a lot more forgiving when encountering invalid components (Matthias Klumpp)
  * Implement component removal via remove-component merges (Matthias Klumpp)
  * validator: Warn about insecure URLs, handle mailto: URLs (Matthias Klumpp)
  * Add a contact URL type (Robert Ancell)
  Specification:
  * Document new remove-component merge type (Matthias Klumpp)
  Bugfixes:
  * as-pool: fix GObject annotation for GPtrArray owning the elements (Corentin Noël)
  * Make invalid components ratio check more accurate (Matthias Klumpp)
  * Ensure description paragraphs contain no invalid XML tags (Matthias Klumpp)
- Update to 0.12.3:
  Notes:
  * Beginning with this release, data from local .desktop files will not be loaded into
    the pool automatically, unless a metainfo file also exists.
    This should ensure less duplicated components in general higher-quality data to be
    displayed. It also provides another incentive to add/fix metainfo files.
    If you prefer the previous behavior, set the AS_POOL_FLAG_READ_DESKTOP_FILES flag
    on your AsPool instance.
  Features:
  * apt: Ignore errors post-update (Matthias Klumpp)
  * validator: Allow content_rating to be empty (Matthias Klumpp)
  * ascli: Display stock icon name if no suitable icon was found for details view (Matthias Klumpp)
  * Refactor loading of local metainfo files (Matthias Klumpp)
  Specification:
  * spec: Clarify the requirement for content_attribute tags in content_rating (Matthias Klumpp)
  * docs: Write intro for addon quickstart (Matthias Klumpp)
  * docs: Replace hyphens in component-IDs of XML examples (Matthias Klumpp)
  Bugfixes:
  * Ensure all addons are linked to a component (David Hewitt)
  * Annotate nullable return types (David Hewitt)
  * cache: Set explicit variant types for cases where they can not be inferred (Matthias Klumpp)
  * utils: Handle NULL strings when comparing versions (Matthias Klumpp)
  * Explicitly include string.h in as-tag.c (Matthias Klumpp)
  * Properly ignore desktop-entry components if we have better data (Matthias Klumpp)
  * Remove AppStream XSD schema (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * Set error variable if there were some errors during refinement (Stefan Bruens)
- Remove patches, now upstream:
  * explicit-variant-types.patch
  * workaround-hidden-symbols.patch</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Replace boilerplate and em-dash summaries.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1560945600">- Update to 0.12.7:
  Notes:
  * This release changes the way AsPool caches components and will also
    permanently keep components in an LMDB-based cache.
    Additionally, the GVariant AsComponent serialization was removed.
  Features:
  * Depend on LMDB (Matthias Klumpp)
  * tests: Test pool cache and XML read performance separately (Matthias Klumpp)
  * Improvements to data caching and fulltext search (Matthias Klumpp)
  * Add new LMDB based component cache (Matthias Klumpp)
  * cache: Implicitly hash keys if they are too long for the database (Matthias Klumpp)
  * cache: Implement all supported search modes (Matthias Klumpp)
  * cache: Implement various performance optimizations and helpers (Matthias Klumpp)
  * cache: Allow switch to nosync mode, make insertions threadsafe (Matthias Klumpp)
  * Refactor component pool to make use of the mmap'ed caches by default (Matthias Klumpp)
  * Don't limit term length in user search queries (Matthias Klumpp)
  * Ignore one-letter search terms (Matthias Klumpp)
  * pool: Mask removed components in readonly caches so they can not be queried (Matthias Klumpp)
  * Remove component GVariant serialization (Matthias Klumpp)
  * cache: Use binary representations for cache values (Matthias Klumpp)
  * cache: Always refine launchable entries, to make them searchable (Matthias Klumpp)
  * Make component scope API public (Matthias Klumpp)
  * Handle LicenseRef URLs explicitly when extracing a license URL (Matthias Klumpp)
  * Update static data (Matthias Klumpp)
  * tests: Update perf test with test for the new cache implementation (Matthias Klumpp)
  * its: Add "translatable" option in metainfo.its (fujiwarat)
  Specification:
  * Add a note about not dropping .desktop suffix from existing IDs (Kalev Lember)
  * spec: clarify &lt;translation/&gt; purpose (Kamil Páral)
  * docs: Explicitly rule out nested lists (Marius Vollmer)
  * docs: Add link to project page to specification abstract (Matthias Klumpp)
  * spec: Clarify format of the appstream: URI (Matthias Klumpp)
  * spec: Clarify how to denote proprietary licenses (Matthias Klumpp)
  Bugfixes:
  * tests: Fix potential wrong output when two tests fail in parallel (Matthias Klumpp)
  * validator: Allow some top-level tags to be empty (Matthias Klumpp)
  * Only match all things for broad queries, for invalid ones return nothing (Matthias Klumpp)
  * Determine system cache age correctly and don't needlessly refresh it (Matthias Klumpp)
  * Never attempt to load the system cache when it is not needed (Matthias Klumpp)
  * Assume "unknown" distribution ID by default (if /etc/os-release is missing) (Matthias Klumpp)
  * cache: Ensure previous cache is closed before opening a new one (Matthias Klumpp)
  * Put test data in alphabetical order (Robert Ancell)
  * Generate XML and YAML in alphabetical order (Robert Ancell)
- Add patch to work with vanilla lmdb:
  * find-lmdb.patch
- Add patch to fix build on Leap:
  * 0001-Restore-compatibility-with-GLib-2.58.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564401600">- Update summary and description</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1564488000">- Add patches to fix crash with some invalid metainfo (boo#1139463):
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
- Update build requirements
- Add %check section</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576756800">- Drop itstools BuildRequires, not required for either building or testing.
- xsltproc is no longer invoked via xmlto, drop xmlto, explicitly
  add required xsltproc and docbook-xsl-stylesheets.</changelog>
  <changelog author="christophe@krop.fr" date="1582718400">- Update to 0.12.10. Check the NEWS file for the complete changelog.
- Drop patches. Issues fixed upstream:
  * 0001-Restore-compatibility-with-GLib-2.58.patch
  * 0001-Fix-possible-NULL-dereference.patch
  * 0002-Don-t-ignore-xmlNodeDump-return-code.patch
  * 0003-Fix-infinite-recursion-if-component-has-itself-liste.patch
  * find-lmdb.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1593691200">- Update to 0.12.11:
  Features:
  * Auto-update static category data from fd.o
  * Implement support for input control relations
  * validator: Validate input control relations
  * validator: Put AppStream technical terms and tag names in backticks in
    explanation texts
  * Modernize the README
  * validator: Check for uppercase letters in cids
  * Strip beginning/trailing newlines in a number of places
  * Make AsContext getter for AsComponent public API
  * qt: Add support for name_variant_suffix
  * Make component sort-score API public API
  * Implement a YAML representation of release artifact information
  Specification:
  * Build specification and docs with DAPS
  * docs: Add (HTML) anchors for requires/recommends items
  * spec: Specify user input control recommendations
  * docs: Don't show reference to nonexistent provides-&gt;service tag for services
  * spec: Encourage the use of only lowercase letters for component-IDs
  * docs: Document --explain flag in ascli manual page as well
  * docs: Add permalink anchors to some list entries
  * Formally support BLAKE2b/s as hash functions for release artifacts
  * docs: Link to the MetaInfo Creator webapp in a few places
  Bugfixes:
  * Be less noisy about ignoring excessively long search tokens
  * Tighten the "free license" check and prevent false positives
  * cache: Use correct fts value per result (David Hewitt)
  * validator: Control items can't have a version
  * validator: Reduce download timeout
  * yaml: Strip encoding when serializing keyword lists
  * Allows arbitrary indentation when converting NEWS files
  * Ignore NULL values silently in our stringstrip function
  * Only dump valid metainfo description markup, sanitize it otherwise
- Add patch to avoid parser errors for invalid descriptions:
  * properly-escape-markup.patch
- Add patch to fix build on Leap 15.2:
  * fix-build-gcc7.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605182400">- Add patch to avoid FD leak:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1610366400">- Disable vala bindings, fails to build on Leap 15.2 because
  g-ir-scanner emits the return type before parameters, which vapigen does not like
- Update to 0.13.1:
  Bugfixes:
  * Install enum types headers to the right location
  * qt: Construct library using libappstream dependency object
  * validator: Improve check for invalid hyperlinks to reduce false-positives
- Update to 0.13.0:
  Notes:
  * This release introduces a new library, libappstream-compose, designed to
    provide building blocks for composing AppStream metadata. This includes GUI
    stuff like font and SVG rendering, which libappstream deliberately does not
    provide. The new compose library is not API/ABI stable and should - for now -
    only be used by appstream-generator.
  Features:
  * qt: add missing Provided::KindId enum (Aleix Pol)
  * Add experimental libappstream-compose (Matthias Klumpp)
  * Implement support for display_length relation kind (Matthias Klumpp)
  * Implement "tv-remote" input control kind (Matthias Klumpp)
  * Refactor AsRelation to use GVariant internally (Matthias Klumpp)
  * content-rating: Align the OARS/CSM mappings of sex-* (Philip Withnall)
  * content-rating: Add content rating system APIs from gnome-software (Philip Withnall)
  * content-rating: Expand translator comments to link to OARS website (Philip Withnall)
  Specification:
  * spec: Specify display_length requires/recommends item (Matthias Klumpp)
  * spec: Add tv-remote user input control type (Matthias Klumpp)
  Bugfixes:
  * Use glib-mkenums to create the GType of all the available enums (Corentin Noël)
  * Set FD_CLOEXEC on the LMDB FD manually (Fabian Vogt)
  * Never ship with an embedded convenience copy of Highlight.js (Matthias Klumpp)
  * Don't fail doc install if global highlight.js wasn't found (Matthias Klumpp)
  * Properly escape markup when fixing invalid description data (Matthias Klumpp)
  * validator: Don't pass NULL to vprintf, it's not an allowed value (Matthias Klumpp)
  * meson: Kill deprecation warning for pkgconfig.generate (Matthias Klumpp)
  * validator: Demote cid-contains-uppercase-letter from INFO to PEDANTIC (Matthias Klumpp)
  * Change some AsPool GIR annotations to only transfer container,
    as workaround for issue in GIR (Matthias Klumpp)
  * Properly parse YAML font provides entry (Matthias Klumpp)
  * content-rating: Lower the OARS/CSM mapping of sex-homosexuality/intense (Philip Withnall)
  * Change return annotation of as_agreement_get_sections to "transfer none" (Rico Tzschichholz)
  * contrib: Vala expects element-type of PtrArray to reflect their ownership (Rico Tzschichholz)
- Drop patches, now upstream:
  * 0001-Set-FD_CLOEXEC-on-the-LMDB-FD-manually.patch
  * properly-escape-markup.patch
- Refresh fix-build-gcc7.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1613563200">- Update to version 0.14.1:
  + Features:
  - Switch back from Soup to cURL for HTTP(S).
  - validator: Check a few more things on requires/recommends
    items.
  - Only download the first bytes of a file when checking URLs
    for validity.
  + Specification: spec: Officially mark &lt;mimetypes/&gt; tag as
    deprecated.
  + Bugfixes:
  - qt: Return better errors in AppStream::Metadata.
  - Do not automatically clean up errors that will be propagated.
  - Remove overall extern "C" to make very new (2.67+) GLib
    versions happy.
  - ascli: Don?t use GNU C extension type names.
  - build: Use c11 rather than gnu11 and define vendor extensions
    separately.
- Changes from version 0.14.0:
  + Features:
  - news-to-metainfo: Interpret placeholder release dates as
    denoting a dev version.
  - Make as_utils_build_data_id public API.
  - Add AsReview for attaching user reviews to software
    components.
  - Add a branch element to component data-IDs.
  - utils: Add data-ID hashing and matching functions.
  - utils: Make as_gstring_replace public API.
  - Add branch info to on-disk cached components.
  - content-rating: Add as_content_rating_add_attribute API.
  - Rename INPUTMETHOD component kind enum to INPUT_METHOD.
  - Add "cabinet" bundle type for firmware deployments.
  - Make AsTokenMatch public API.
  - Add function to AsScreenshot to get image closest to
    preferred size.
  - Allow AsComponent to directly ingest desktop-entry data.
  - Make as_pool_build_search_tokens API public.
  - Add "origin" token match.
  - Make as_component_add_provided_item API public.
  - Add some useful image dimension constants.
  - compose: Add blur function from asglib.
  - Add more efficient load_from_bytes method to AsComponent.
  + Updated translations.
- Drop fix-build-gcc7.patch: no longer applicable.
- Replace pkgconfig(libsoup-2.4) with pkgconfig(libcurl)
  BuildRequires: follow upstreams switch back to cURL.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to version 0.14.3
  * spec: Mention that license-IDs are case-sensitive
  * compose: Don't loop endlessly if external desktop l10n function
    is set
  * Never create a predictable dir in /tmp for caching
  * qt: Implement missing Pool::componentsByCategories
  * Share one user-owned read-only system metadata cache between all
    applications
  * pool: Clean up user sysdata caches if we start to use the system
    cache
  * Port over some parsing improvements for desktop-files from asgen
  * compose: Add helper for reading desktop-entry files
  * compose: Handle bad UTF-8 in desktop-entry files even better
  * search: Perform partial token matches instead of prefix matches
  * search: Unconditionally perform partial term matching after
    exact matching
  * news-to-metainfo: Recognize the "Contributors" section
  * Update our own metainfo file for appstreamcli
  * Read descriptions from collection XML correctly again
  * search: Make whole-search string matching a lot more strict
  * validator: Resolve false-positive when testing remote icon
    URL validity
  * utils: Improve textwrap if text is just one excessively
    long word
  * compose: Permit U+00AD SOFT HYPHEN in string values
  * Validate our own metainfo file
  * compose: Don't assume lowest priority for desktop-entry-only
    components
  * search: Only replace full words with greylist terms,
    not partial ones
  * ascli: Take all positional parameters as search terms when
    searching</changelog>
  <changelog author="lbeltrame@kde.org" date="1628424000">- Update to version 0.14.4
  * qt: Expose setter and getter for pool cache location
  * utils: Use GLib's gstring_replace if available
  * its: Allow to mark release descriptions as non-translatable
  * compose: Point people at the specification if metadata license is invalid
  * docs: Clarify which metadata licenses are permitted
  * docs: Fix a typo on the icon cache page
  * spec: Add a paragraph about which license to put in &lt;project_license&gt;
  * Add documentation for YAML release type and urgency
  * Add documentation for YAML provides
  * component: Don't strip ";" from keywords before translating them
  * utils: Don't strip modifiers when stripping encoding
  * compose: Check optipng is there before we use it
  * Improve text line wrapping, especially if many newlines are present
  * Make word-wrap function unicode-aware
  * Make license_is_metadata_license parse more complex expressions
  * Improve cache refresh code, don't flag cache as updated if update failed
  * Use system cache even if we had to drop some invalid metadata
  * Assign more string class members safely
  * Fix flashed firmware generating incorrect XML
  * Fix YAML having wrong names for the firmware data</changelog>
  <changelog author="avvissu@yandex.by" date="1630065600">- Create and install a Vala API file</changelog>
  <changelog author="christophe@krop.fr" date="1634817600">- Update to 0.14.6. Check the NEWS file for the list of changes.
- Only install the license files once.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1640174400">- Update to version 0.15.1
  * compose: Port over font support from appstream-generator
  * compose: Allow overriding unit used for locale processing
  * compose: Refine legacy support for desktop-id launchables
  * compose: Allow setting the custom desktop-entry translation function
  * compose: Allow to run with threading (mostly) disabled
  * compose: Reorganize feature flags, allow to disable l10n
  * compose: Allow setting a screenshot file size limit
  * compose: Allow to disable screencast processing explicitly
  * compose: Allow to test whether result has a specific hint tag
  * news-convert: Support a "Translators" section
  * validator: Check that first rDNS component-ID parts are always lowercased
  * validator: Validate capitalization for some selected text blocks
  * vapi: Rename PoolFlag to PoolFlags to add the missing deprecated flags
  * Fix cache always getting updated even if unnacessary on Debian systems
  * Still verify download return codes if download was aborted intentionally
  * compose: Warn if metainfo files are missing and data was processed anyway
- Update to version 0.15.0
  * This release contains a complete rewrite of AppStream's
    caching code, making use of libxmlb instead of LMDB now.
    This will allow for more complex queries and simplifies the
    caching code a bit.
  * Allow clients to configure the addon autoresolve magic
  * Allow clients to control the local metainfo preference
  * qt: Add wrappers for new AsPool API
  * qt: Wrap the AsPool ::changed signal
  * Implement the new "Tags" tag
  * Make component-ID search case-insensitive
  * compose: Adjust to rsvg API changes
  * qt: Align API deprecations with C library API
  * Cache Flatpak data properly, and add some quirk fixes for it
- Add BuildRequires itstool
- Add BuildRequires xmlb &gt;= 0.3.6
- Update BuildRequires glib-2.0 to &gt;= 2.62
- Remove BuildRequires lmdb-devel</changelog>
</package>
<package pkgid="3cb227221f04a3ec8499a8231d04d8a59c82e47152e6e023a6b4d81b166d5a51" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="faaa10d98e0828065c42784ea47e72877a4fb7eb7a0b92a2766c3b93a5e64a41" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.31.1"/>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655294400">- security update
- added patches
  fix CVE-2019-17540 [bsc#1153866], heap-based buffer overflow in ReadPSInfo in coders/ps.c
  + ImageMagick-CVE-2019-17540.patch</changelog>
</package>
<package pkgid="d23ce37c5ce6c97af098d14e2bf3f457a146042fd90d22c0e77821b9115e2c74" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.36.1"/>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655294400">- security update
- added patches
  fix CVE-2019-17540 [bsc#1153866], heap-based buffer overflow in ReadPSInfo in coders/ps.c
  + ImageMagick-CVE-2019-17540.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661774400">- security update
- added patches
  fix CVE-2021-20224 [bsc#1202800], integer overflow in ExportIndexQuantum() function in MagickCore/quantum-export.c
  + ImageMagick-CVE-2021-20224.patch</changelog>
</package>
<package pkgid="39000cd7611f7c71c703d8397ea636a34a995bb9c214ef7f5c453e35ffa2247f" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.39.1"/>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655294400">- security update
- added patches
  fix CVE-2019-17540 [bsc#1153866], heap-based buffer overflow in ReadPSInfo in coders/ps.c
  + ImageMagick-CVE-2019-17540.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661774400">- security update
- added patches
  fix CVE-2021-20224 [bsc#1202800], integer overflow in ExportIndexQuantum() function in MagickCore/quantum-export.c
  + ImageMagick-CVE-2021-20224.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2021-3574 [bsc#1203212], memory leaks with convert command
  + ImageMagick-CVE-2021-3574.patch</changelog>
</package>
<package pkgid="50f06dc338b4ce4385e2ad42e73ca212ed722c0e0633ad2be74c57d59d95fab0" name="ImageMagick" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="22ef148bd1b908910eb1a3b461215be4823449de49c5c85e17239571f7efb6d6" name="ImageMagick" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="ece00f9a3bcdd768314fbc2da4acd17d5c26807acd72179bba58840739db1e95" name="ImageMagick" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="b1520b6ccf3acf9f941840ac1877b6dfe45a9eb8d4b0830c3044df7b4a2535ea" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="c3f6ca7eedce2253c7f55e860f605a54fe7103b6f69c3c91d3b88ac260823708" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="ab090aae1d138bc8ae0056fbf82fb95cac5d0432d87d7f8d7c6f154c0b17e3c6" name="ImageMagick" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="81edff8ef8b54f75e39f237eb0fb9e6b55e2805a7f27fb56f12e982e04e59a91" name="ImageMagick" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="e188b695c32a15a000f26a28ad62e29979f293de3742677f8392ff2abc7730da" name="ImageMagick" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="08a9d174a9e5a0ad6ea132a4977265ab23e599ac1ad418a8a2e9b32a8c725473" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="0388beaf2f3c6a952d9c1299372b1cba70d3b0057016dd3949e0a110c928f8af" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="4b2f2b16921f27eace673aa1b365778c2af1f7548c3cf5bcefdcf8b1f2dc4367" name="ImageMagick" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="d4fe484f0cf5fe51347e48a72c774e6248f3c1c0f50dac8eef5c8eb3d38ed029" name="ImageMagick" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="d0cbcb26e5af0f2bde6159c57bb5ac153433459f5dd8ec9947dcfbb9788b9bf6" name="ImageMagick" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="b274cd594048a41fc16c29cc13e3b9dc9714866da604d48f03fcdc9dc8e29887" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="34a8465b35487409e9e74f7971cd8ef07240eeae007693b5bd37169ad29e62a9" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="aff1a40f2ab6b1950fc9b872997cc676367eb32317227f8dde6d669a4c2420b7" name="ImageMagick-config-7-SUSE" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="f672673508eabfa8f452c9ce7eda192c23799e1665d2f8c8d46303298d50577a" name="ImageMagick-config-7-SUSE" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="e9e48b1a747a564d1ae53d8f750ce581b124bbb13aeefd81630b0364fe552128" name="ImageMagick-config-7-SUSE" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="67ce7e5b62037316e13f3d29a635423ba1a06b98a0ead8514604ef2959817fa4" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="c563832263a575ac63db5cc0f7c9a3fd8b9c0a6dcc03d4c40045f5a38700308c" name="ImageMagick-config-7-SUSE" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="22965059cf3b4262126a565dea6eda60a9145823782a14d2840483e129ea364a" name="ImageMagick-config-7-SUSE" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="8275b57f566d1a647f1165f63fd408b2ef654276945ced850e0a5d86b73cc409" name="ImageMagick-config-7-SUSE" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="a258f50f563630c493bcfec9b0f33d7ac42e416f149ef851df17d4470f25ef6b" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="de8d64a96529f0ed0ec1478c98ef975353f45834313963f3a5c55caf2b3756c9" name="ImageMagick-config-7-SUSE" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="58d62711c38bac6dd9b6743b73b1aecc5bdf4c52b42d20f99c417eb775119897" name="ImageMagick-config-7-SUSE" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="3daf56f5b764ccacd4bb7979db9fddf5087e654ec4254e75447d89f962150572" name="ImageMagick-config-7-SUSE" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="97ceb013046b5fdcafe10bca2ff4c9412a2f95a7aae92daa090306db86861e9c" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="7f78ed94b86ec7bcc712f503dde3937dc70e29546d546948d454fab2729ea839" name="ImageMagick-config-7-upstream" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="0c83c5f4b5a71909e245af1dc228c6d247e165544c30b2286fe1b7e3c8475d64" name="ImageMagick-config-7-upstream" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="bb27aeffc6b1e822b2cfca408c59f79e28705be06d02100977bee8e14263ce72" name="ImageMagick-config-7-upstream" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="a7a70c2f25b39c7abccc38a7dc8a77a899ff2f7596ea55f88ed44fe80211fd21" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="f04f9fd8247926050d79b8bd692f56da00cd79fbac708a305336234aebd73482" name="ImageMagick-config-7-upstream" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="cba87c33557ebc3de36fe5d375840141219cd3cf13ba5af866e1a7b51a343f99" name="ImageMagick-config-7-upstream" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="da130fdbc471b58716a9aabb146768ebb6735035bf23d51bc3c5e33308b71f78" name="ImageMagick-config-7-upstream" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="f5c8c3ad515811731190b440e95b3bc46e51fcc0d4c84d6693af3678aa8aaa6b" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="1b68d64bba24083423f484085e39541240b22b5666aae13af41ba74f40cf1d2a" name="ImageMagick-config-7-upstream" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="73258a3a8d2c760d69688da70469ffe4e4b012cc72da18e1e33702518bfc2842" name="ImageMagick-config-7-upstream" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="7ba6e036bf546631823fb5b1af4049282fc2f59f062463534c21c269051ac719" name="ImageMagick-config-7-upstream" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="a5e3957f441fbc8027ef985f83aa3bb94841e7ddc4f25e9aa45a0841f0eb53ad" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="5c34173e991c63ff3f8ed05f5b741e5a47480b97265b8ff949a60e187f1cfc68" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="6811769266491621670e06489ffc57e665435ffb196b04ab5ccbdf2984cb56f0" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="9f756c5f65544272300bab2aee05bc850307f65940ef9f09213c26b0bdab3f8c" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="7765408775711b43effd95880e37c485b4d43f1a37499cf349079bc87fe3d6e2" name="ImageMagick-devel" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="cdb67700044b8a9462fc6d01203a2c898606dbbdf27ed80b1e92916f1a7517ca" name="ImageMagick-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="9d506e0e837f6469a463533c2097308d36fb54842fdeb74558f7eb06c16b1c86" name="ImageMagick-devel" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="9db91f273904b88466fccf8cfa0d30796db544ce0026e907e1256534792c01a5" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="7ecf43469076b3776122e1c7d3d0b0c77e70eb3ec477be77fb56822eb7cea9d5" name="ImageMagick-devel" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="1c11e8161b6d85a6ccfd6f25c8e59dc29673c43889905862fdb2b285f123df37" name="ImageMagick-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="2891b2b81ba1183199e8698a20a24926f939b1aca642a3e57572cee2ffd7efe5" name="ImageMagick-devel" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="7e98bb3f28cccb6fb9385bf2f7ab982af43061d993f388d1e13efbb060b359e7" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="5cfac1d46d3bc17c81e9856b88e54a5886b2783432461bb8b7a44014c89390d6" name="ImageMagick-devel" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="b12c8245ec384a7a7e4285a00fbb8ef1e50c74c837701824816cbb607ce826de" name="ImageMagick-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="68481e9d17bbd2dac508f2add19174cede4e48b6f9ffa97066ac3c66eb5603a1" name="ImageMagick-devel" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="686bb019f5eb123a259e2d94b8f5e8ac1eb2b6ea7d030705744db5d727eeca26" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="ed65d5c3e31c9e615456acaeb9cef150d11f73f188588c584ea54b4e85ec4384" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="45ab3ca386fef28dd4b19332f2a1a331f6b100f5d500dd53bfd11fe379d83c1d" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="e3a0034dd58a91aa514a36d0f41aa7d3d75ac0798593a4fd7acf1276d018d90a" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="ea30c0c3dcbaa0ec2c7fad323ad2e9cc0be3cbfbed0fdb3f46cb5c4baaba95e0" name="ImageMagick-extra" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="ada86d5d797b472ac434cfae40143b7ac7c9c866ac324256a64ac7fc23d379ea" name="ImageMagick-extra" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="4728f2318490796fa4aa3c615d487473af0bb23ac02538303404b37b1ca235a0" name="ImageMagick-extra" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="ec2f5b26f11ed454c7da8e11d023a1d8aef62e8f1581c5f16ebfead332195f1b" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1614081600">- version update to 7.0.11.1
  * bump minor version #
  * allow reading multichannel PSD files with 1 or 2 channels.
  * respect masks when computing SSIM metric (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3212).</changelog>
  <changelog author="dmueller@suse.com" date="1615723200">- update to 7.0.11.3:
  * Eliminate multiple division by zero exceptions (reference
    https://github.com/ImageMagick/ImageMagick/issues/3339 and others).
  * Use -define filename:literal=true to bypass interpretting embedded
    formatting characters and instead use the filename literally.
  * decode HEIC images in sRGB instead of YCbCr.
  * Division by zero error is possible if crafty file sets film-gamma property
  * Check for overflow in thumbnail coder
  * Prevent compiler from optimizing out buffer clearing in cipher
  * Clone properties from image stack.
  * Set overall image depth statistic in Composite channel.</changelog>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
</package>
<package pkgid="ddd05895f09df8e766d52236fbe99e5e74b226ccc9e97a16225096a5e7c9586f" name="ImageMagick-extra" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="edfb74a5e10a7f183dd5ff91a969a89f49863bfea55c79ecdcbc3bc9bb717f1d" name="ImageMagick-extra" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="c40f0b3b1000f83faca6f51136c7e44096b510afd28118ac76bf7426b30d711c" name="ImageMagick-extra" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="8ae29cba5949c62922fdc4b9de8a7ac66cec1bf8a7cb419ae188e2b163c35a38" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.6.1"/>
  <changelog author="dmueller@suse.com" date="1616846400">- update to 7.0.11.4:
  * support caption:split define (reference
  * avoid an omp deadlock with policy string</changelog>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
</package>
<package pkgid="9ee21eba211cdcee08ddc414b5cb3ea705b8b3cf5aae13bdfb4601e2ed50f023" name="ImageMagick-extra" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="534429ef824226bb2dfd9cd77f867a3bfb95a3b959a2d9f7714f8f45507eff42" name="ImageMagick-extra" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="601ca851d6f97756034bcefc2b62ef6d8a18fcdae1e35cb42ac7b072974b4dee" name="ImageMagick-extra" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="b56329904ab61288e8e2da32bff08d804cfaf5f00f4c38c4581c982fd94568ef" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.9.1"/>
  <changelog author="pgajdos@suse.com" date="1617192000">- version update to 7.0.11.5
  * OpenCL will be disable by default, use the environment variable
    MAGICK_OCL_DEVICE to turn it on or select the device to use.
- modified patches
  % ImageMagick-library-installable-in-parallel.patch (refreshed)</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- udpate to 7.0.11.6:
  * fix portable Windows build.</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- version update to 7.0.11.7
  * constrain sub-image list.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="code@bnavigator.de" date="1619697600">- force --with-fftw delegate support. FFTW3 is a BuildRequirement
  but not detected automatically.</changelog>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
</package>
<package pkgid="ad460a1012e98cabc9c450033ad238b79559fcdd6760ccb04e9a56fb6bcfb617" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.10" rel="150000.4.29.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1357041600">- Switch SSL backend to openssl, we all agree that OpenSSL
  has it faults, but it is heavily optimized in all platforms
  not only x86 and performance matters in interactive,latency
  sensitive tasks like VNC.
- libvncserver-ossl.patch Ensures openssl use less memory
  and avoid abi breaks on openSSL updates.</changelog>
  <changelog author="jengelh@inai.de" date="1357992000">- Follow shared library packaging guidelines
- Avoid self-obsolete tag
- Put libvncserver-config into -devel where it should belong
- Provide pkgconfig() RPM symbols</changelog>
  <changelog author="mmeister@suse.com" date="1363608000">- Add Url to Source section in spec file</changelog>
  <changelog author="coolo@suse.com" date="1404216000">- remove old .bz2 file</changelog>
  <changelog author="olaf@aepfle.de" date="1412337600">- Obsolete old LibVNCServer.rpm in libvncclient0 package. The old
  version included binaries, devel and runtime libs. But nothing
  removes the old package, which leads to file conflicts during
  upgrade if linuxvnc.rpm is not on the install media (bnc#893343)</changelog>
  <changelog author="p.drouand@gmail.com" date="1418472000">- Update to version 0.9.10
  + Moved the whole project from sourceforge to https://libvnc.github.io/.
  + Cleaned out the autotools build system which now uses autoreconf.
  + Updated noVNC HTML5 client to latest version.
  + Split out x11vnc sources into separate repository at
    https://github.com/LibVNC/x11vnc
  + Split out vncterm sources into separate repository at
    https://github.com/LibVNC/vncterm
  + Split out VisualNaCro sources into separate repository at
    https://github.com/LibVNC/VisualNaCro
  + Merged Debian patches.
  + Fixed some security-related buffer overflow cases.
  + Added compatibility headers to make LibVNCServer/LibVNCClient
    build on native Windows 8.
  + Update LZO to version 2.07, fixing CVE-2014-4607.
  + Merged patches from KDE/krfb.
  + Can now do IPv6 without IPv4.
  + Fixed a use-after-free issue in scale.c.
- Update Url and download source to new project home
- Remove LibVNCServer-0.9.9-no_x11vnc.patch; upstream splited it
  out of main tarball
- Rebase libvncserver-ossl.patch to upstream changes
  &gt; libvncserver-0.9.10-ossl.patch
- Remove linuxvnc subpackage; like x11vnc, it has been splited out
  but is depreciated and unmaintained.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546516800">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1549368000">- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch
  * CVE-2018-20750 [bsc#1123832]
    + LibVNCServer-CVE-2018-20750.patch
  * CVE-2018-20748 [bsc#1123823]
    + LibVNCServer-CVE-2018-20748.patch</changelog>
  <changelog author="fezhang@suse.com" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch
- note the correct way how to run the testsuite, it does not
  seem to be usable as it is, though (segfaults)</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- security update
- added patches
  fix CVE-2017-18922 [bsc#1173477], preauth buffer overwrite
  + LibVNCServer-CVE-2017-18922.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594209600">- security update
- added patches
  fix CVE-2020-14397 [bsc#1173700], NULL pointer dereference in libvncserver/rfbregion.c
  + LibVNCServer-CVE-2020-14397.patch
  fix CVE-2020-14399 [bsc#1173743], Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  + LibVNCServer-CVE-2020-14399.patch
  fix CVE-2020-14400 [bsc#1173691], Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  + LibVNCServer-CVE-2020-14400.patch
  fix CVE-2020-14401 [bsc#1173694], potential integer overflows in libvncserver/scale.c
  + LibVNCServer-CVE-2020-14401.patch
  fix CVE-2020-14402 [bsc#1173701], out-of-bounds access via encodings.
  + LibVNCServer-CVE-2020-14402,14403,14404.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594296000">- security update
- added patches
  fix CVE-2018-21247 [bsc#1173874], uninitialized memory contents are vulnerable to Information leak
  + LibVNCServer-CVE-2018-21247.patch
  fix CVE-2019-20839 [bsc#1173875], buffer overflow in ConnectClientToUnixSock()
  + LibVNCServer-CVE-2019-20839.patch
  fix CVE-2019-20840 [bsc#1173876], unaligned accesses in hybiReadAndDecode can lead to denial of service
  + LibVNCServer-CVE-2019-20840.patch
  fix CVE-2020-14398 [bsc#1173880], improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  + LibVNCServer-CVE-2020-14398.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-25708 [bsc#1178682], libvncserver/rfbserver.c has a divide by zero which could result in DoS
  + LibVNCServer-CVE-2020-25708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
</package>
<package pkgid="a37270cc495f04491aaa9755ca43e857843c2c5e48bfa758057e720fb9519462" name="LibVNCServer" arch="src">
  <version epoch="0" ver="0.9.13" rel="150400.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546516800">- Update to version 0.9.11
    Overall changes:
    LibVNCServer/LibVNCClient development now uses continous intregration,
    provided by TravisCI.
    LibVNCClient:
    Now initializes libgcrypt before use if the application did not do it.
    Fixes a crash when connection to Mac hosts
    (#45).
    Various fixes that result in more stable handling of malicious or broken
    servers.
    Removed broken and unmaintained H264 decoding.
    Some documentation fixes.
    Added hooks to WriteToTLS() for optional protection by mutex.
    LibVNCServer:
    Stability fixes for the WebSocket implementation.
    Replaced SHA1 implementation with the one from RFC 6234.
    The built-in HTTP server does not allow directory traversals anymore.
    The built-in HTTP now sends correct MIME types for CSS and SVG.
    Added support for systemd socket activation.
    Made it possible to get autoPort behavior with either ipv4 or ipv6
    disabled.
    Fixed starting of an onHold-client in threaded mode.
- dropped patches:
  - libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch (upstreamed)
  - libvncserver-byteswap.patch (stop maintaining not upstreamed patch)
- modified patches:
  % libvncserver-0.9.10-ossl.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1546516801">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1547208000">- Fix devel package dependencies</changelog>
  <changelog author="pgajdos@suse.com" date="1549368000">- update to version 0.9.12
  - Overall changes:
  * CMake now is the default build system, Autotools were removed.
  * In addition to TravisCI, all commits are now build-tested by AppVeyorCI.
  - LibVNCServer/LibVNCClient:
  * Numerous build fixes for Visual Studio compilers to the extent that
    one can now _build_ the project with these. The needed changes for
    successfully _running_ stuff will be implemented in 0.9.13.
  * Fixed building for Android and added build instructions.
  * Removed the unused PolarSSL wrapper.
  * Updated the bundled noVNC to latest release 1.0.0.
  * Allowed to use global LZO library instead of miniLZO.
  - LibVNCClient:
  * Support for OpenSSL 1.1.x.
  * Support for overriding the default rectangle decode handlers (with
    hardware-accelerated ones for instance) thanks to Balazs Ludmany.
  * vnc2mpg updated.
  * Added support for X509 server certificate verification as part of the
    handshake process thanks to Simon Waterman.
  * Added a TRLE decoder thanks to Wiki Wang.
  * Included Tight decoding optimizations from TurboVNC thanks to DRC.
  * Ported the SDL viewer from SDL 1.2 to SDL 2.0.
  * Numerous security fixes.
  * Added support for custom auth handlers in order to support additional
    security types.
  - LibVNCServer:
  * Websockets rework to remove obsolete code thanks to Andreas Weigel.
  * Ensured compatibility with gtk-vnc 0.7.0+ thanks to Micha? K?pie?.
  * The built-in webserver now sends correct MIME type for Javascript.
  * Numerous memory management issues fixed.
  * Made the TightVNC-style file transfer more stable.
- removed patches
  - LibVNCServer-CVE-2018-20021.patch (upstreamed)
  - LibVNCServer-CVE-2018-20023.patch (upstreamed)
  - libvncserver-0.9.10-ossl.patch (not upstreamed)
  - LibVNCServer-CVE-2018-15127.patch (upstreamed)
  - LibVNCServer-CVE-2018-6307.patch (upstreamed)
  - LibVNCServer-CVE-2018-20019.patch (upstreamed)
  - LibVNCServer-CVE-2018-7225.patch (upstreamed)
  - LibVNCServer-CVE-2018-20022.patch (upstreamed)
  - libvncserver-0.9.1-multilib.patch (cmake now)
  - LibVNCServer-CVE-2018-15126.patch (upstreamed)
  - LibVNCServer-CVE-2018-20020.patch (upstreamed)
  - LibVNCServer-CVE-2018-20024.patch (upstreamed)
- removed by upstream
  - libvncserver-config
- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1549886400">- fix cmake build, add cmake-libdir.patch (upstream issue #281)</changelog>
  <changelog author="pgajdos@suse.com" date="1549886401">- use upstream commit, amend cmake-libdir.patch</changelog>
  <changelog author="fezhang@suse.com" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1572868801">- turn the test suite on</changelog>
  <changelog author="fvogt@suse.com" date="1578657600">- Add patches to fix crash on shutdown:
  * avoid-pthread_join-if-backgroundLoop-is-FALSE.patch
  * fix-crash-on-shutdown.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
</package>
<package pkgid="6a355ca6997193307c6e2fe41320a1f92698dc3e0aa22e9f9af57143888e1855" name="LibVNCServer-devel" arch="aarch64">
  <version epoch="0" ver="0.9.13" rel="150400.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546516800">- Update to version 0.9.11
    Overall changes:
    LibVNCServer/LibVNCClient development now uses continous intregration,
    provided by TravisCI.
    LibVNCClient:
    Now initializes libgcrypt before use if the application did not do it.
    Fixes a crash when connection to Mac hosts
    (#45).
    Various fixes that result in more stable handling of malicious or broken
    servers.
    Removed broken and unmaintained H264 decoding.
    Some documentation fixes.
    Added hooks to WriteToTLS() for optional protection by mutex.
    LibVNCServer:
    Stability fixes for the WebSocket implementation.
    Replaced SHA1 implementation with the one from RFC 6234.
    The built-in HTTP server does not allow directory traversals anymore.
    The built-in HTTP now sends correct MIME types for CSS and SVG.
    Added support for systemd socket activation.
    Made it possible to get autoPort behavior with either ipv4 or ipv6
    disabled.
    Fixed starting of an onHold-client in threaded mode.
- dropped patches:
  - libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch (upstreamed)
  - libvncserver-byteswap.patch (stop maintaining not upstreamed patch)
- modified patches:
  % libvncserver-0.9.10-ossl.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1546516801">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1547208000">- Fix devel package dependencies</changelog>
  <changelog author="pgajdos@suse.com" date="1549368000">- update to version 0.9.12
  - Overall changes:
  * CMake now is the default build system, Autotools were removed.
  * In addition to TravisCI, all commits are now build-tested by AppVeyorCI.
  - LibVNCServer/LibVNCClient:
  * Numerous build fixes for Visual Studio compilers to the extent that
    one can now _build_ the project with these. The needed changes for
    successfully _running_ stuff will be implemented in 0.9.13.
  * Fixed building for Android and added build instructions.
  * Removed the unused PolarSSL wrapper.
  * Updated the bundled noVNC to latest release 1.0.0.
  * Allowed to use global LZO library instead of miniLZO.
  - LibVNCClient:
  * Support for OpenSSL 1.1.x.
  * Support for overriding the default rectangle decode handlers (with
    hardware-accelerated ones for instance) thanks to Balazs Ludmany.
  * vnc2mpg updated.
  * Added support for X509 server certificate verification as part of the
    handshake process thanks to Simon Waterman.
  * Added a TRLE decoder thanks to Wiki Wang.
  * Included Tight decoding optimizations from TurboVNC thanks to DRC.
  * Ported the SDL viewer from SDL 1.2 to SDL 2.0.
  * Numerous security fixes.
  * Added support for custom auth handlers in order to support additional
    security types.
  - LibVNCServer:
  * Websockets rework to remove obsolete code thanks to Andreas Weigel.
  * Ensured compatibility with gtk-vnc 0.7.0+ thanks to Micha? K?pie?.
  * The built-in webserver now sends correct MIME type for Javascript.
  * Numerous memory management issues fixed.
  * Made the TightVNC-style file transfer more stable.
- removed patches
  - LibVNCServer-CVE-2018-20021.patch (upstreamed)
  - LibVNCServer-CVE-2018-20023.patch (upstreamed)
  - libvncserver-0.9.10-ossl.patch (not upstreamed)
  - LibVNCServer-CVE-2018-15127.patch (upstreamed)
  - LibVNCServer-CVE-2018-6307.patch (upstreamed)
  - LibVNCServer-CVE-2018-20019.patch (upstreamed)
  - LibVNCServer-CVE-2018-7225.patch (upstreamed)
  - LibVNCServer-CVE-2018-20022.patch (upstreamed)
  - libvncserver-0.9.1-multilib.patch (cmake now)
  - LibVNCServer-CVE-2018-15126.patch (upstreamed)
  - LibVNCServer-CVE-2018-20020.patch (upstreamed)
  - LibVNCServer-CVE-2018-20024.patch (upstreamed)
- removed by upstream
  - libvncserver-config
- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1549886400">- fix cmake build, add cmake-libdir.patch (upstream issue #281)</changelog>
  <changelog author="pgajdos@suse.com" date="1549886401">- use upstream commit, amend cmake-libdir.patch</changelog>
  <changelog author="fezhang@suse.com" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1572868801">- turn the test suite on</changelog>
  <changelog author="fvogt@suse.com" date="1578657600">- Add patches to fix crash on shutdown:
  * avoid-pthread_join-if-backgroundLoop-is-FALSE.patch
  * fix-crash-on-shutdown.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
</package>
<package pkgid="2f9b9dcc0c04be00f399b85c542cd5a2576aedb6c8c10ca349195bd0b1e97a75" name="LibVNCServer-devel" arch="ppc64le">
  <version epoch="0" ver="0.9.13" rel="150400.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546516800">- Update to version 0.9.11
    Overall changes:
    LibVNCServer/LibVNCClient development now uses continous intregration,
    provided by TravisCI.
    LibVNCClient:
    Now initializes libgcrypt before use if the application did not do it.
    Fixes a crash when connection to Mac hosts
    (#45).
    Various fixes that result in more stable handling of malicious or broken
    servers.
    Removed broken and unmaintained H264 decoding.
    Some documentation fixes.
    Added hooks to WriteToTLS() for optional protection by mutex.
    LibVNCServer:
    Stability fixes for the WebSocket implementation.
    Replaced SHA1 implementation with the one from RFC 6234.
    The built-in HTTP server does not allow directory traversals anymore.
    The built-in HTTP now sends correct MIME types for CSS and SVG.
    Added support for systemd socket activation.
    Made it possible to get autoPort behavior with either ipv4 or ipv6
    disabled.
    Fixed starting of an onHold-client in threaded mode.
- dropped patches:
  - libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch (upstreamed)
  - libvncserver-byteswap.patch (stop maintaining not upstreamed patch)
- modified patches:
  % libvncserver-0.9.10-ossl.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1546516801">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1547208000">- Fix devel package dependencies</changelog>
  <changelog author="pgajdos@suse.com" date="1549368000">- update to version 0.9.12
  - Overall changes:
  * CMake now is the default build system, Autotools were removed.
  * In addition to TravisCI, all commits are now build-tested by AppVeyorCI.
  - LibVNCServer/LibVNCClient:
  * Numerous build fixes for Visual Studio compilers to the extent that
    one can now _build_ the project with these. The needed changes for
    successfully _running_ stuff will be implemented in 0.9.13.
  * Fixed building for Android and added build instructions.
  * Removed the unused PolarSSL wrapper.
  * Updated the bundled noVNC to latest release 1.0.0.
  * Allowed to use global LZO library instead of miniLZO.
  - LibVNCClient:
  * Support for OpenSSL 1.1.x.
  * Support for overriding the default rectangle decode handlers (with
    hardware-accelerated ones for instance) thanks to Balazs Ludmany.
  * vnc2mpg updated.
  * Added support for X509 server certificate verification as part of the
    handshake process thanks to Simon Waterman.
  * Added a TRLE decoder thanks to Wiki Wang.
  * Included Tight decoding optimizations from TurboVNC thanks to DRC.
  * Ported the SDL viewer from SDL 1.2 to SDL 2.0.
  * Numerous security fixes.
  * Added support for custom auth handlers in order to support additional
    security types.
  - LibVNCServer:
  * Websockets rework to remove obsolete code thanks to Andreas Weigel.
  * Ensured compatibility with gtk-vnc 0.7.0+ thanks to Micha? K?pie?.
  * The built-in webserver now sends correct MIME type for Javascript.
  * Numerous memory management issues fixed.
  * Made the TightVNC-style file transfer more stable.
- removed patches
  - LibVNCServer-CVE-2018-20021.patch (upstreamed)
  - LibVNCServer-CVE-2018-20023.patch (upstreamed)
  - libvncserver-0.9.10-ossl.patch (not upstreamed)
  - LibVNCServer-CVE-2018-15127.patch (upstreamed)
  - LibVNCServer-CVE-2018-6307.patch (upstreamed)
  - LibVNCServer-CVE-2018-20019.patch (upstreamed)
  - LibVNCServer-CVE-2018-7225.patch (upstreamed)
  - LibVNCServer-CVE-2018-20022.patch (upstreamed)
  - libvncserver-0.9.1-multilib.patch (cmake now)
  - LibVNCServer-CVE-2018-15126.patch (upstreamed)
  - LibVNCServer-CVE-2018-20020.patch (upstreamed)
  - LibVNCServer-CVE-2018-20024.patch (upstreamed)
- removed by upstream
  - libvncserver-config
- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1549886400">- fix cmake build, add cmake-libdir.patch (upstream issue #281)</changelog>
  <changelog author="pgajdos@suse.com" date="1549886401">- use upstream commit, amend cmake-libdir.patch</changelog>
  <changelog author="fezhang@suse.com" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1572868801">- turn the test suite on</changelog>
  <changelog author="fvogt@suse.com" date="1578657600">- Add patches to fix crash on shutdown:
  * avoid-pthread_join-if-backgroundLoop-is-FALSE.patch
  * fix-crash-on-shutdown.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
</package>
<package pkgid="3f4837a86da70687a8047436f9c6418d3f8f26df261304fc7ca15bb832ead9ff" name="LibVNCServer-devel" arch="s390x">
  <version epoch="0" ver="0.9.13" rel="150400.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546516800">- Update to version 0.9.11
    Overall changes:
    LibVNCServer/LibVNCClient development now uses continous intregration,
    provided by TravisCI.
    LibVNCClient:
    Now initializes libgcrypt before use if the application did not do it.
    Fixes a crash when connection to Mac hosts
    (#45).
    Various fixes that result in more stable handling of malicious or broken
    servers.
    Removed broken and unmaintained H264 decoding.
    Some documentation fixes.
    Added hooks to WriteToTLS() for optional protection by mutex.
    LibVNCServer:
    Stability fixes for the WebSocket implementation.
    Replaced SHA1 implementation with the one from RFC 6234.
    The built-in HTTP server does not allow directory traversals anymore.
    The built-in HTTP now sends correct MIME types for CSS and SVG.
    Added support for systemd socket activation.
    Made it possible to get autoPort behavior with either ipv4 or ipv6
    disabled.
    Fixed starting of an onHold-client in threaded mode.
- dropped patches:
  - libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch (upstreamed)
  - libvncserver-byteswap.patch (stop maintaining not upstreamed patch)
- modified patches:
  % libvncserver-0.9.10-ossl.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1546516801">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1547208000">- Fix devel package dependencies</changelog>
  <changelog author="pgajdos@suse.com" date="1549368000">- update to version 0.9.12
  - Overall changes:
  * CMake now is the default build system, Autotools were removed.
  * In addition to TravisCI, all commits are now build-tested by AppVeyorCI.
  - LibVNCServer/LibVNCClient:
  * Numerous build fixes for Visual Studio compilers to the extent that
    one can now _build_ the project with these. The needed changes for
    successfully _running_ stuff will be implemented in 0.9.13.
  * Fixed building for Android and added build instructions.
  * Removed the unused PolarSSL wrapper.
  * Updated the bundled noVNC to latest release 1.0.0.
  * Allowed to use global LZO library instead of miniLZO.
  - LibVNCClient:
  * Support for OpenSSL 1.1.x.
  * Support for overriding the default rectangle decode handlers (with
    hardware-accelerated ones for instance) thanks to Balazs Ludmany.
  * vnc2mpg updated.
  * Added support for X509 server certificate verification as part of the
    handshake process thanks to Simon Waterman.
  * Added a TRLE decoder thanks to Wiki Wang.
  * Included Tight decoding optimizations from TurboVNC thanks to DRC.
  * Ported the SDL viewer from SDL 1.2 to SDL 2.0.
  * Numerous security fixes.
  * Added support for custom auth handlers in order to support additional
    security types.
  - LibVNCServer:
  * Websockets rework to remove obsolete code thanks to Andreas Weigel.
  * Ensured compatibility with gtk-vnc 0.7.0+ thanks to Micha? K?pie?.
  * The built-in webserver now sends correct MIME type for Javascript.
  * Numerous memory management issues fixed.
  * Made the TightVNC-style file transfer more stable.
- removed patches
  - LibVNCServer-CVE-2018-20021.patch (upstreamed)
  - LibVNCServer-CVE-2018-20023.patch (upstreamed)
  - libvncserver-0.9.10-ossl.patch (not upstreamed)
  - LibVNCServer-CVE-2018-15127.patch (upstreamed)
  - LibVNCServer-CVE-2018-6307.patch (upstreamed)
  - LibVNCServer-CVE-2018-20019.patch (upstreamed)
  - LibVNCServer-CVE-2018-7225.patch (upstreamed)
  - LibVNCServer-CVE-2018-20022.patch (upstreamed)
  - libvncserver-0.9.1-multilib.patch (cmake now)
  - LibVNCServer-CVE-2018-15126.patch (upstreamed)
  - LibVNCServer-CVE-2018-20020.patch (upstreamed)
  - LibVNCServer-CVE-2018-20024.patch (upstreamed)
- removed by upstream
  - libvncserver-config
- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1549886400">- fix cmake build, add cmake-libdir.patch (upstream issue #281)</changelog>
  <changelog author="pgajdos@suse.com" date="1549886401">- use upstream commit, amend cmake-libdir.patch</changelog>
  <changelog author="fezhang@suse.com" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1572868801">- turn the test suite on</changelog>
  <changelog author="fvogt@suse.com" date="1578657600">- Add patches to fix crash on shutdown:
  * avoid-pthread_join-if-backgroundLoop-is-FALSE.patch
  * fix-crash-on-shutdown.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
</package>
<package pkgid="f78ac075af76de1ea6ae35eb2cd815d67feb0db5c46cdf3d42901cb69bfa16e7" name="LibVNCServer-devel" arch="x86_64">
  <version epoch="0" ver="0.9.13" rel="150400.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1423396800">- libvncserver-0.9.10-ossl.patch: Update, do not
  RAND_load_file("/dev/urandom", 1024) if the the PRNG is already
  seeded. (It always is on linux)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1423396801">- Remove xorg-x11-devel from buildRequires, X libraries
  are not directly used/linked</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1464091200">- Fix build errors of applications using stl_algobase.h and
  libvncserver's rfbproto.h, e.g. krfb (issue #102)
  * Add libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1521547200">- security update
  * CVE-2018-7225 [bsc#1081493]
    + LibVNCServer-CVE-2018-7225.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546516800">- Update to version 0.9.11
    Overall changes:
    LibVNCServer/LibVNCClient development now uses continous intregration,
    provided by TravisCI.
    LibVNCClient:
    Now initializes libgcrypt before use if the application did not do it.
    Fixes a crash when connection to Mac hosts
    (#45).
    Various fixes that result in more stable handling of malicious or broken
    servers.
    Removed broken and unmaintained H264 decoding.
    Some documentation fixes.
    Added hooks to WriteToTLS() for optional protection by mutex.
    LibVNCServer:
    Stability fixes for the WebSocket implementation.
    Replaced SHA1 implementation with the one from RFC 6234.
    The built-in HTTP server does not allow directory traversals anymore.
    The built-in HTTP now sends correct MIME types for CSS and SVG.
    Added support for systemd socket activation.
    Made it possible to get autoPort behavior with either ipv4 or ipv6
    disabled.
    Fixed starting of an onHold-client in threaded mode.
- dropped patches:
  - libvncserver-0.9.10-use-namespaced-rfbMax-macro.patch (upstreamed)
  - libvncserver-byteswap.patch (stop maintaining not upstreamed patch)
- modified patches:
  % libvncserver-0.9.10-ossl.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1546516801">- security update
  * CVE-2018-15126 [bsc#1120114]
    + LibVNCServer-CVE-2018-15126.patch
  * CVE-2018-6307 [bsc#1120115]
    + LibVNCServer-CVE-2018-6307.patch
  * CVE-2018-20020 [bsc#1120116]
    + LibVNCServer-CVE-2018-20020.patch
  * CVE-2018-15127 [bsc#1120117]
    + LibVNCServer-CVE-2018-15127.patch
  * CVE-2018-20019 [bsc#1120118]
    + LibVNCServer-CVE-2018-20019.patch
  * CVE-2018-20023 [bsc#1120119]
    + LibVNCServer-CVE-2018-20023.patch
  * CVE-2018-20022 [bsc#1120120]
    + LibVNCServer-CVE-2018-20022.patch
  * CVE-2018-20024 [bsc#1120121]
    + LibVNCServer-CVE-2018-20024.patch
  * CVE-2018-20021 [bsc#1120122]
    + LibVNCServer-CVE-2018-20021.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1547208000">- Fix devel package dependencies</changelog>
  <changelog author="pgajdos@suse.com" date="1549368000">- update to version 0.9.12
  - Overall changes:
  * CMake now is the default build system, Autotools were removed.
  * In addition to TravisCI, all commits are now build-tested by AppVeyorCI.
  - LibVNCServer/LibVNCClient:
  * Numerous build fixes for Visual Studio compilers to the extent that
    one can now _build_ the project with these. The needed changes for
    successfully _running_ stuff will be implemented in 0.9.13.
  * Fixed building for Android and added build instructions.
  * Removed the unused PolarSSL wrapper.
  * Updated the bundled noVNC to latest release 1.0.0.
  * Allowed to use global LZO library instead of miniLZO.
  - LibVNCClient:
  * Support for OpenSSL 1.1.x.
  * Support for overriding the default rectangle decode handlers (with
    hardware-accelerated ones for instance) thanks to Balazs Ludmany.
  * vnc2mpg updated.
  * Added support for X509 server certificate verification as part of the
    handshake process thanks to Simon Waterman.
  * Added a TRLE decoder thanks to Wiki Wang.
  * Included Tight decoding optimizations from TurboVNC thanks to DRC.
  * Ported the SDL viewer from SDL 1.2 to SDL 2.0.
  * Numerous security fixes.
  * Added support for custom auth handlers in order to support additional
    security types.
  - LibVNCServer:
  * Websockets rework to remove obsolete code thanks to Andreas Weigel.
  * Ensured compatibility with gtk-vnc 0.7.0+ thanks to Micha? K?pie?.
  * The built-in webserver now sends correct MIME type for Javascript.
  * Numerous memory management issues fixed.
  * Made the TightVNC-style file transfer more stable.
- removed patches
  - LibVNCServer-CVE-2018-20021.patch (upstreamed)
  - LibVNCServer-CVE-2018-20023.patch (upstreamed)
  - libvncserver-0.9.10-ossl.patch (not upstreamed)
  - LibVNCServer-CVE-2018-15127.patch (upstreamed)
  - LibVNCServer-CVE-2018-6307.patch (upstreamed)
  - LibVNCServer-CVE-2018-20019.patch (upstreamed)
  - LibVNCServer-CVE-2018-7225.patch (upstreamed)
  - LibVNCServer-CVE-2018-20022.patch (upstreamed)
  - libvncserver-0.9.1-multilib.patch (cmake now)
  - LibVNCServer-CVE-2018-15126.patch (upstreamed)
  - LibVNCServer-CVE-2018-20020.patch (upstreamed)
  - LibVNCServer-CVE-2018-20024.patch (upstreamed)
- removed by upstream
  - libvncserver-config
- security update
  * CVE-2018-20749 [bsc#1123828]
    + LibVNCServer-CVE-2018-20749.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1549886400">- fix cmake build, add cmake-libdir.patch (upstream issue #281)</changelog>
  <changelog author="pgajdos@suse.com" date="1549886401">- use upstream commit, amend cmake-libdir.patch</changelog>
  <changelog author="fezhang@suse.com" date="1550664000">- Add BuildRequire libgnutls-devel: Remmina needs it for VNC
  connections (boo#1123805)</changelog>
  <changelog author="pgajdos@suse.com" date="1572868800">- security update
- added patches
  CVE-2019-15681 [bsc#1155419]
  + LibVNCServer-CVE-2019-15681.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1572868801">- turn the test suite on</changelog>
  <changelog author="fvogt@suse.com" date="1578657600">- Add patches to fix crash on shutdown:
  * avoid-pthread_join-if-backgroundLoop-is-FALSE.patch
  * fix-crash-on-shutdown.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1587988800">- security update
- added patches
  fix CVE-2019-15690 [bsc#1160471], heap buffer overflow
  + LibVNCServer-CVE-2019-15690.patch
  fix CVE-2019-20788 [bsc#1170441], integer overflow and heap-based buffer overflow via a large height or width value
  + LibVNCServer-CVE-2019-20788.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1588593600">- deleted patches
  - LibVNCServer-CVE-2018-20749.patch (mistakenly added, it is
    already part of 0.9.12)</changelog>
  <changelog author="pgajdos@suse.com" date="1593518400">- version update to 0.9.13 [bsc#1173477]
  [#]# Overall changes:
  * Small tweaks to the CMake build system.
  * The macOS server example was overhauled and is now the most feature-complete sample
    application of the project, ready for real-world use.
  * Lots of documentation updates and markdownifying.
  * The TravisCI continuous integration now also build-checks cross-compilation from
    Linux to Windows.
  * Setup a [Gitter community chat](https://gitter.im/LibVNC/libvncserver) for the project.
  [#]# LibVNCServer/LibVNCClient:
  * Both LibVNCServer and LibVNCClient now support an additional platform, namely
    Microsoft Windows. Building is supported with Visual Studio as well as MingGW.
  * The separate crypto routines used by LibVNCClient and LibVNCServer were refactored
    into an implementation common to both libraries.
  * Several security issues got fixed.
  * The bundled noVNC client is now at version 1.1.0 and included via a git submodule.
  [#]# LibVNCClient:
  * Added connect timeout as well as read timeout support thanks to Tobias Junghans.
  * Both TLS backends now do proper locking of network operations when multi-threaded
    thanks to Gaurav Ujjwal.
  * Fixed regression in Tight/Raw decoding introduced in 0.9.12 thanks to DRC.
  * Fixed encrypted connections to AnonTLS servers when using the OpenSSL back-end.
    Made possible by the profound research done by Gaurav Ujjwal.
  [#]# LibVNCServer:
  * Added a hooking function (`clientFramebufferUpdateRequestHook`) to deliver
    rfbFramebufferUpdateRequest messages from clients to the frame producer
    thanks to Jae Hyun Yoo.
  * Added SetDesktopSize/ExtendedDesktopSize support thanks to Floris Bos.
  * Added multi-threading support for MS Windows.
  * Fixed VNC repeater/proxy functionality that was broken in 0.9.12.
  * Fixed unstable WebSockets connections thanks to Sebastian Kranz.
- deleted patches
  - LibVNCServer-CVE-2019-15681.patch (upstreamed)
  - LibVNCServer-CVE-2019-15690.patch (upstreamed)
  - LibVNCServer-CVE-2019-20788.patch (upstreamed)
  - avoid-pthread_join-if-backgroundLoop-is-FALSE.patch (upstreamed)
  - cmake-libdir.patch (upstreamed)
  - fix-crash-on-shutdown.patch (upstreamed)</changelog>
  <changelog author="fcrozat@suse.com" date="1610107200">- Add many patches needed for GNOME Remote desktop (already in
  Fedora):
  * TLS security type enablement patches gh#LibVNC/libvncserver!234
  - 0001-libvncserver-Add-API-to-add-custom-I-O-entry-points.patch
  - 0002-libvncserver-Add-channel-security-handlers.patch
  - 0003-libvncserver-auth-don-t-keep-security-handlers-from-.patch
  * Fix crash on all runs after the first gh#LibVNC/libvncserver!444 rh#1882718
  - 0004-zlib-Clear-buffer-pointers-on-cleanup-444.patch
  * Fix another crasher glgo#GNOME/gnome-remote-desktop#45 rh#1882718
  - 0001-libvncserver-don-t-NULL-out-internal-of-the-default-.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631880000">- purposedly adding just this changelog entry
- previous version updates fixed also:
  * CVE-2020-14398 [bsc#1173880] -- improperly closed TCP connection causes an infinite loop in libvncclient/sockets.c
  * CVE-2017-18922 [bsc#1173477] -- preauth buffer overwrite
  * CVE-2018-20748 [bsc#1123823] -- libvnc contains multiple heap out-of-bounds writes
  * CVE-2020-25708 [bsc#1178682] -- libvncserver/rfbserver.c has a divide by zero which could result in DoS
  * CVE-2018-21247 [bsc#1173874] -- uninitialized memory contents are vulnerable to Information leak
  * CVE-2018-20750 [bsc#1123832] -- heap out-of-bounds write vulnerability in libvncserver/rfbserver.c
  * CVE-2020-14397 [bsc#1173700] -- NULL pointer dereference in libvncserver/rfbregion.c
  * CVE-2019-20839 [bsc#1173875] -- buffer overflow in ConnectClientToUnixSock()
  * CVE-2020-14401 [bsc#1173694] -- potential integer overflows in libvncserver/scale.c
  * CVE-2020-14400 [bsc#1173691] -- Byte-aligned data is accessed through uint16_t pointers in libvncserver/translate.c.
  * CVE-2019-20840 [bsc#1173876] -- unaligned accesses in hybiReadAndDecode can lead to denial of service
  * CVE-2020-14399 [bsc#1173743] -- Byte-aligned data is accessed through uint32_t pointers in libvncclient/rfbproto.c.
  * CVE-2020-14402 [bsc#1173701] -- out-of-bounds access via encodings.
  * CVE-2020-14403 [bsc#1173701]
  * CVE-2020-14404 [bsc#1173701]</changelog>
  <changelog author="pgajdos@suse.com" date="1662638400">- security update
- added patches
  fix CVE-2020-29260 [bsc#1203106], memory leakage via rfbClientCleanup()
  + LibVNCServer-CVE-2020-29260.patch</changelog>
</package>
<package pkgid="13f4602bfc311e8b082c9fb61ae9fed7a92ded5085a844a80983b4b6c73c1a57" name="Mesa" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="523bef179a91e81d17590808e518225748a490b6a792f634f0899924f2bf77b0" name="Mesa" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="f57b0aea35696b587fdd7c0e7b958dec7d0514d9709a8cf5df6d37326d473500" name="Mesa" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="6c3eb173d417ea42db1032d8bdb9e72da0e36db455a9185f3cffc658f5519abf" name="Mesa" arch="src">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="af4c3bd63345aa0596a042c8d5c374b6d6451ad6af0a456f9f689d85135e8c6f" name="Mesa" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="4e9c0d7e1a5314416d0ccf3ce0ceb8875c37b22cecf020a8f0870ca612b61b2f" name="Mesa" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="a6f9400701c5c35e22a447394d07cc71e651e208350e366c02902dba8468917e" name="Mesa" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="a63490e61e2b66e43eef6b0a29047ad252f3b7bc8084be0fb48f1aa57caaa774" name="Mesa" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="9f24b72e4ef2a326f65413f5621bc2d67f1eb448497d5e1954176d75de0c128e" name="Mesa" arch="src">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="8f5b3b140df8d7d1d0aab040db9fa2d18b48f76092677f42f8dfff64b5bd772e" name="Mesa" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="b95fa6c6a4d1b6f623d74faf6d83b2e44f71835f871104c3aede0e69b3eaf373" name="Mesa" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="d5070ac9bf3a1db0161cfaa7105abbf53abd864615cb2dedd103e14fd8f16f9d" name="Mesa" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="ccafa3bbf6f1a585710b23e744253983223ddcedddea9cf5644308e1163a47f4" name="Mesa" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="0d861b56b1c3db60e998935c3e32b108423b03e9a15520a73badab47b1e2785f" name="Mesa" arch="src">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="faeba87dd6461d303af100b826fcc8273c911f605125e89d3368648ca44f169c" name="Mesa" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="3606a7c2d448afd06bfd0f468363115a44bc08c5bfc9b43e01242729f98c6e85" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="b06e15be7dc7b01fc85dc982146ab4b254033013ad0e2f17f972e544bde267ab" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="78a316b2ce2ba04bac2156cbbff5b92a29248176ad44897bb2d1c1e378ccb623" name="Mesa-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="6b7c1cb16259180345f7fd633aa0e48241118fcce4e76346e3333051f48e3e8b" name="Mesa-KHR-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="3a165e5c7cecdf65777957cc0af29c16a5f5a5827bee402cee73f03b3d6f8005" name="Mesa-KHR-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="a4e554f9854ca74e00936e8d8f9ffa9d6ebbaff25ea9383c25e797333b3cd7b3" name="Mesa-KHR-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="7f40d7e49c247a21ad458b9fce7dfd8b58ec3ffd995b88c4f9d5df4d883c9467" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="96c4c2e210951d7a17b94e3dd3abf866e1cdead89b78eee71d8e11c33b5a6bcd" name="Mesa-KHR-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="72978358cb8ba246f33a10776ae5144a26da0f28e3e8f1d55593dabb9740ad33" name="Mesa-KHR-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="7d5e55beca33fce02fa47b208f650bc80f679c8317baded51fc2ad47d2da353f" name="Mesa-KHR-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="a78b45a908007dce283ed15766353778487d7d70fbf765ab001de1c4fc30a273" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="d76cf97f7385faf3c0e7a91c0815aa123dc42ac659b8ca2bdd35ce63638525cb" name="Mesa-KHR-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="9cef947de540ca3864320a23b01f1e7faaa4af4e9ef83425177fbede0c0d8bd2" name="Mesa-KHR-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="a5149c69fedb9b8a00d6bc6086a7bd005decb5ec8d20c807525a156bb9bd74d6" name="Mesa-KHR-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="d02a875ca260be6268d9494a54dbdf0c9873780ddd6e9a8cced9bcca98e830e0" name="Mesa-KHR-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="f664764be2f12d2f382698f242f3de9f22f319bc01522e019445879760cec4db" name="Mesa-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="b3ec88e8caed9ee9b418a4c25df8bd163436daed71a466708433aabc4c35c080" name="Mesa-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="411a3599ad9cc30050e217721c8243a040ffd542c848a28a39da5307409f3ca5" name="Mesa-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="44df37c70679050710eb7cbb5275424c814350cd1e5b690f4fced24142cdd824" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="440a2b778e73cec58195a97665746d86a4a36c632f90380e7ccd01a9a4e84488" name="Mesa-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="88d1ce7cae54a81e26c9a8ebb65219a6d344bf9293d7fac85d432bb89690dfd4" name="Mesa-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="24fdd2ac8fe6fd49cdc63621d4859987f755c14cca0e5cfa00b2707ee6100332" name="Mesa-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="401bc0d335997ea385ba2ad3d967dae120bb78f054bdb90ddd75be133d3ef95f" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="ef8ef11ae5e4c1a7037ba5f46e546464866862c6c925f3382752ef4619c116ef" name="Mesa-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="7786f021160e81f738455bc83235b1d7b935aeb2321ffa7c5ba3e5207fff2dd6" name="Mesa-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="1be20d0d947c00f86bd82ce780b4aac54959f237220ccf6980d362dfd6ecd58d" name="Mesa-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="1c31a99a3c9b802b012dcd3660d6aa3b48db2d88108ebc3a221ba3064de73642" name="Mesa-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="1953105d9174ad9a91089d0c11e633096bed26c26d243aa8752197c94c1c250f" name="Mesa-dri" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="c82716edcaaacf76677dcdaa5dbee2334420708b76113ba80237be6de19760ed" name="Mesa-dri" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="a2a7aaceeae2ce1b51ff32626a4d91dfaa0e77e81cb0858814e285cb98f384f9" name="Mesa-dri" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="0d5eaa26be7abf36ea96a98356c872543fd80f5bdb9ca1c24f74acdf5a04833e" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="1e221221ba3bc397a4171c21b526602752cd92eb0c4efc1a4f4e50ed210084e8" name="Mesa-dri" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="aaa6f2e208a7674eed42a3fe20c968e79cb6750a9cdd9fbf0b4c8222c8aead67" name="Mesa-dri" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="98f094b70351f27182944e9406ca7f59e8aa268a9bc65684ace4a795d22e2540" name="Mesa-dri" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="c9ef5f570e702296c5adea9646be96d86efa1a47dcbb4413a8854d5bbebb8398" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="3a54883ecec0ab9296b312d63e1f9cc614c12d9577955aa08fd82157b33fd529" name="Mesa-dri" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="c711855da6f4f6e88145b617f6f87bba5450c11f757f6157cac2cac0077e11df" name="Mesa-dri" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="326f027b52bfbc8e9c10fca4085ee0f65481fd13cbe4804da3919d1211b7fcf4" name="Mesa-dri" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="41c636b1dabf834620e7fa4a647bfbc23ef838a073169b34584f80eb8e86e6b6" name="Mesa-dri" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="43590b3aae968e57996ee7c5b17d24d5a2e267b74325006880c543caf0770a50" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="102658429b366e964af97db0cc9dd64e8df40aea066d4cc557964dc1fb37eca8" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="85faca0ee426843a264c3c5ee02ac4a4078dbe1b6542973b806b752a8a74ddf8" name="Mesa-dri-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="c1e7f72bd91b87e9314f6b16d305ac95cc190dd0f622da0774336f0e7f42b9cf" name="Mesa-dri-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="ee515695a5c445ee355ce4ecf66859a306596056937a8529b683835d661f29a8" name="Mesa-dri-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="7cc197d5d6093401a4acedc42a319f7d03a9e90657f6dbe9e8bb9f4deb9dabed" name="Mesa-dri-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="47c65c69e0a53d246e7b617d2f84d0783fe8aeda39fccbbd64d986fd40185010" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="acd381da64cb53e71429a2d63adf2449086450359ca9be27d8be7d6ee24c120f" name="Mesa-dri-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="67b8ca13dc8cfb8df378c93f5f726c5e51f79375ec166f83e3d6fb2dcebf4308" name="Mesa-dri-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="7593067330f92d6dd30bd0d2de065aae0088f941a02c456fd7ead87b9a54f0b8" name="Mesa-dri-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="0d15e0e14b965083185a0efc87523743236bf887ce9410c470cca830f3bbe8c8" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="5261f23d5f70bf7f5905828c7fbd5b52245b0fbbb57a76151e61ec6fa2519519" name="Mesa-dri-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="f6351050a6b12fb4322c571fa8bb05064419c9323f515c3583dfeae836127260" name="Mesa-dri-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="d40fe9864a424a564aa3fc8da64789c11767ca8bf09bd17988d5f57d2920479b" name="Mesa-dri-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="341a67891cdeb321c6e48e01d79548494f7113b4eb0b1bf0133c194cfe874555" name="Mesa-dri-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="6fd7722f9665f88e0551879bbcc5c887c9a260eabb22f763beff5e687c518824" name="Mesa-dri-nouveau" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="fe298acddfa75570fca0cb71b3eb37085c79abd071e4af578839d7636feaa38e" name="Mesa-dri-nouveau" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="9a14abc970e2ea6d6b8ca384c56f6d6f6a63cfd426208fcf60f3de9b2d21fdfa" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="d482cb72afc43d4f429c0663cbaf7b071e79343d4a3fddddd85299e115033d52" name="Mesa-dri-nouveau" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="b056267159e1747df1ffd1a9fe154a1dc64c500e0e280e525b51aa483c2df88a" name="Mesa-dri-nouveau" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="376d9b4cbaa237f71837489d6f6611b2ea16e5da8727b6697b7e0d2a5bfe3531" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="673858608e8289a0fa663b55003c518f2b81a945880bf82ff07275c640116920" name="Mesa-dri-nouveau" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="67f4704c656bdf25b9ca9a105c4ed3f91e3bd7795b0455090b55c9e6276c166f" name="Mesa-dri-nouveau" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="d1d95196bdc214a5cfe28ecb84139ec2ccc06a359a1543a89a34db77615f8e28" name="Mesa-dri-nouveau" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="7e8e04e9651a8df3b2328501911247f513eb3a023359bb80448cf5b9e8d558a6" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="727cadf09fc9a22fa943c70026d43868a915b664f1849f1b97ddadc2b005a348" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="948d8f7562b975b8a9be5d38dac812bb08570af007ac307c2858a93a561aeb2d" name="Mesa-dri-nouveau-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="f61ceeb3aa26190ca6493a4eae5d16645ba56926cd3c2627592dc5257badeb86" name="Mesa-dri-vc4" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="92d55eb577fdd4b2787fee26951b43255b4e7a218d1aa33f6cb5eeb77e45d8f9" name="Mesa-dri-vc4" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="575fed2ab6acdb8fd3a0e467f0e1c6f56f05d064e27614133e5bf0046282728c" name="Mesa-dri-vc4" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="f93ed7b0b27895e1daf26a76a4325901bdb3acc130e977092e05f88b56b1905e" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="c289d9544297e6fdcaaea3b66abdf566d2b951ad13d796078660364dbf7db53b" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="cc33e064586aaec5930ac872b1c45300c5194a8790ac730e468d574d57dcb780" name="Mesa-drivers" arch="src">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="88ff61ff25f8e8423072d1614dc30c272dc3f0d19e837fee604c8f4ad29b56ee" name="Mesa-gallium" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="7ad8a26e038b7a6b733541929c0d700dc7ed4b5f857b7cdb102e37cfd1ec2f8b" name="Mesa-gallium" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="b5444b6b0f5938a46e4be3d2155cda2667c506997b9d95b7f1c26af8f2070582" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="88af8715eae0086c74ecb835f0f53e95f8d63ce9e9e7f10214f9ccebf97c1618" name="Mesa-gallium" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="6dad8b6b5a18e01a5bffbd083a1eedbf4a2221d982d6f1035a10c496130b2554" name="Mesa-gallium" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="71b735c98042e8b819282801d864984e86acb906efe2d999306f3322e555936d" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="667980a2e3dbb4dc7dcae0d6a517e6689eff512999bea13957dc94ed8e495aed" name="Mesa-gallium" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="b41cfa87c657df263c9d0d82f37e05b3327ea74bc3312920cf50b521f24855ac" name="Mesa-gallium" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="94574b19ae4912ba02a458aed294479784de93d215a8c0aee4a51bfc187d74e1" name="Mesa-gallium" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="22065f94deaf4e52a881484b7e9092ffd3cf0f3ab6881b5ebc933a948bf0c329" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="53f1dd490d84466e4b257645f3525e8d8d8f3c4153133332b07622d533fedfcd" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="788441b2a66821ae11c44a290d09714f9589cda0fd9b19cfe27a611c3d5ce7f9" name="Mesa-gallium-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="d23d700505f84ee7d48be065ffe590abcc60418a4a01bf2921bd537a322c8b7a" name="Mesa-libEGL-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="aa11f5f98e5a01afc84d002272694ffc0b64d938389575006550fce506d86d16" name="Mesa-libEGL-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="8a4a46692b11f35d77c8ef3ee9fede01a6da187d7cbd2d8e260f39a3a703cba0" name="Mesa-libEGL-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="632241b6022629596868db461d5ac287a0ee24a207735b0cf983cdc983cc40b9" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="91eb4f9d724f812eca8f5a9d695ee5077add795a479ec6fe22bddffe868b20de" name="Mesa-libEGL-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="fe1dd38da783ff2db462dc86185ec9dfabdd074f5bd35cb01da58cb0ab878aa7" name="Mesa-libEGL-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="e10eddecc07326d15355540308c706504fc86f7c8bafbf85635d912ee8489046" name="Mesa-libEGL-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="261da2419d4051b1975ab432b195ff1ce403ff7abaa1a0fe420936f463568f62" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="d266d831571e0dd26ba4ef962942624efb01e0cdd3353432d3b2115a45d049db" name="Mesa-libEGL-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="7325c76d3cdb57448c23f7a8e99e6ab11fb82f23cc8d5805c31ff831c51f2c72" name="Mesa-libEGL-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="c248b4ccdc7cb8a74a28284ea5413575d803cdeddc7ecfd19d7565d44d8903bd" name="Mesa-libEGL-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="0d092135d51d204e16f2276aeddd6d0442f2f8caa820d3c2beaa127e1892ea9f" name="Mesa-libEGL-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="058ef4121831c37e8d25b38f0adb2d8f6dcff730c35eb8a0f46a0afc15c8b0df" name="Mesa-libEGL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="2aab908d5c4c5742334d390363d9b7d3e3f3f5d653e24a5d472526698c4467ab" name="Mesa-libEGL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="45fbf15c7e7645660fd3d316c6fadbfc6b89311b66cb2283d95afa899963cdbd" name="Mesa-libEGL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="c2dc25ccc8a96df3c072226b52ac82d9ac481c8ee235e69096dd8d8fbd96f98f" name="Mesa-libEGL1" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="dfac713d199e359a3f78818851abb3d0521289651d3f845b01dc2811c77985b6" name="Mesa-libEGL1" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="88955332c3dc3ee6e078c9acc9eb46528e839e0bcffe8c5c9e750caec26dd643" name="Mesa-libEGL1" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="875b2ac078fad1d0dbee8449ad098f8254e75a603f5e11f3998169a4b61f2020" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="408c452c2966d393c4b1aa4972a83bf6b6df24d77c6b9d0f92164a85054eb254" name="Mesa-libEGL1" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="f040b142524abe13d5c66f69bbb9559d274447ec99efa568c3e9793ae249286e" name="Mesa-libEGL1" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="5cbdb777d954f42d3457687c49dcd5537af80caf36f5d9955eb7e64c991f2679" name="Mesa-libEGL1" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="ca7578ccf34be7994c996572df84442988a95afbb6748ec825ed2aa012d5bb60" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="e38144296af9695a7b9d9332f693779856ebd9b07d06237e6592002ba7e004d6" name="Mesa-libEGL1" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="0f868737236b2fa2eebcb527065310700081f1540763e8c7f3b50db425b418f4" name="Mesa-libEGL1" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="0ee480f62ffef36040529d5c2498d4151de6fa167a0d57b3c3f4cb65529235d6" name="Mesa-libEGL1" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="0cbaf9a495031ed7a313e9fd556f92dfa0ec96dff75e1c69303977a6250c58d5" name="Mesa-libEGL1" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="424b06071d792cda382f62a16a84859e5fd1cacaf33da48e47bbe85cbb857c9d" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="efff46a0ea410beb7ba98808013fc309ae1dc6b8b86b34d2af55d94aaf78aa64" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="9b6efb262f8049444af18ae54b38110fb89769f54ce2edb0b60ec0bc14f37c3f" name="Mesa-libEGL1-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="b1a7a57a2025823e1010ee87224014fcfb09215a724cf6f7847248da0bf81d6e" name="Mesa-libGL-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="544226432b2c4569e1e2d3658fe874ff70e1372d2236bf0b6251e6802f4fabb8" name="Mesa-libGL-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="9d843721faa422e89ceb3c87b1987b27172c63421613b21b2e08ab0bd8b1abba" name="Mesa-libGL-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="960fd25c4fc63d3bce56ded647ca2e5dd8bc81516ee535dca91e8a2856d5d025" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="34890f6264e04bbc62990862961e92c243c1e6488a723bc171237c1f95ee168c" name="Mesa-libGL-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="c09720193c34817fe4413bef434353dfda7c273dae3351dfe3e146f7ce902f15" name="Mesa-libGL-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="02bfb46340d635270ddfeb3ddc09b20d544f701102f6aecc59fbf645c5fd9b24" name="Mesa-libGL-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="c85a335dd2c05b4882ab07980e31d9e1beeff68ddddbbf531373837bcb37bd1b" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="8ff7220c83d3cc61063618686d4ba356ee9d9b8aae7d164103de803292f77b51" name="Mesa-libGL-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="e682a3a9e1c70f1b725a01eaaabaae55473957acc439889ecfadcb874f4e9748" name="Mesa-libGL-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="4b1bdb5ecb7d10561cfce382113b7c6cfad793044fff9586205e35d010b5e97f" name="Mesa-libGL-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="ab6a430426cf6fdfbc3257f6662409cc2886be96777068549b03ec98bd4223db" name="Mesa-libGL-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="84b65a860051f04526a432c34df3571636d2498e46f43841ab718697f0386a7a" name="Mesa-libGL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="239ef2756f0aa72aeb5d2aba3e11285cacb1e29b847ea692e6772731366bb869" name="Mesa-libGL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="4676ba13271c1108af28f388451782a410f8bd853b80c7599a2f244236357ad4" name="Mesa-libGL-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="2b118d0c7a742a51dcf9865617a6746cd767c3a02d796dfdcb626f3442ce1088" name="Mesa-libGL1" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="0143c29d90239a025da7d5f9ad64c75be5a01be60fc47c313465850d0712e202" name="Mesa-libGL1" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="ef926001f8bcd37b591e3e453642679a6148b45134f15a073d36bc00bd95564c" name="Mesa-libGL1" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="576b3ec1d42774b65290a6352f4f5c420451499644cff3a23880546f9ddb30c5" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="ae4660c1dea030f7a4bc4cb46087176d8c5d5f611dfca4960a570d4c237fc1d9" name="Mesa-libGL1" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="ee3a6e9c7e1dda2f8a55cabc9e9326848173a5722367b2f6325fb6f91ba4074a" name="Mesa-libGL1" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="55878d5de9ba48646088918d12680d49d7f658076f36f558ca7201455cceec88" name="Mesa-libGL1" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="2ac3cbf56ffc065c9d41207f2229f0e0879a31920835dcdeda80622e7fb0a5d7" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="5e82e31869083bbc2206a23f49a19273e7ea801a4f10a71c8638136ec2c23fdf" name="Mesa-libGL1" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="5272532a994219321921258a694e5709a53f9e5a6e4291db8c5b47afc1df8a3b" name="Mesa-libGL1" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="d1d693090a94746eaaa2eccd4e1fff59f7255036a24cbca888b2dd6a25a6b1b6" name="Mesa-libGL1" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="4f8dfe5aeb7e533f75f75981c843a5b76a984d4ad341c27f67b48f4a42ca3938" name="Mesa-libGL1" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="45897ca62eec8c612a5ae5b7531a725f2112210a026c89e7378580a29d3b379b" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="9a9ad1530e3a618904652d6fd2f0864189412a47a80080b5677c3a53794aad54" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="d325dea9ede9062bd479bda14180a2a646025a2f8d917f26efd4ffa44e782f64" name="Mesa-libGL1-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="188e29c7d8d6875a9c3a1c2b0226aa448782b7405b2b73e2bf4b4b87664c7a27" name="Mesa-libGLESv1_CM-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="62f6d528093cc6fbf44d0ffbcf15eaef0e06aa3c8319aa9530c5182d6cedcbf8" name="Mesa-libGLESv1_CM-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="3b88243fa4c99eca5a18cc250ea6d4832b83e50d2bf591aff93994bc43ca4e6f" name="Mesa-libGLESv1_CM-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="acfc3cfe9db798df055fbd7d52a02ca5767e95af6344e99abb3dd670b2accc44" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="0874afb0bc7cc96d2e50c0a03b38e8a486dbd37fd7abd6d22d13819b03c2c0c8" name="Mesa-libGLESv1_CM-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="dbe3b134a0acfdb5b17a5e13e7d5905719311218c25dce91d5357c77aea6595d" name="Mesa-libGLESv1_CM-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="13be5c11b18d9410644fbb931a3ed5333e768020c7683a2c91c3309cc22695da" name="Mesa-libGLESv1_CM-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="405e89ba8b811b16c0293dad0504456b9b2580db65cc72552b5291cb5c28e0d5" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="9888e0ef61110f038b4c01dae53177620cae6cf670ea6127dbd651a580520df5" name="Mesa-libGLESv1_CM-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="414072b413431cc76adcd3cf1db6834c085a4371fde0f30be749b5cd84c02ec9" name="Mesa-libGLESv1_CM-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="a301761636555aa7e34352158042a139afb81e54abdd877f698cffda29d1818f" name="Mesa-libGLESv1_CM-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="b890ecb833a5e72052fb37247316d188d734a8506f3b24ca6883dca4bcd95ed1" name="Mesa-libGLESv1_CM-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="2b47928eeb2b7b308847684604dce01995160a935cbf345cdffe8fafd2dc20b1" name="Mesa-libGLESv1_CM-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="e470170c6a8aadd9099ab47573ac199591c724d2fce48500f6f2acfc49b1d5c0" name="Mesa-libGLESv1_CM-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="39a853014fea5d1512c3f6ee2af05d2665fb4488b0c61a0550854b7643d7d9dc" name="Mesa-libGLESv1_CM-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="6e587c22dd1c68cc2d955b1edd8ea7791fcb42629f95cb9f9699ab73c2966cda" name="Mesa-libGLESv2-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="a60124d7304fb3b54f5929cf2a7114f4cc2cae3e278d861ee70ca08bf1abe88a" name="Mesa-libGLESv2-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="72571859c9a8e75d4494f680823ab7f3f85aa4c650efc4f4f5c83aa81e3558cb" name="Mesa-libGLESv2-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="edceecc16cf20a2e37f313a4396905ce38f1f55b4d0c01f344e8f7d65b383def" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="6f190af6e1feef5a761edfcae36115734bd05aa256a45961bbbaa4aa1c4d65e2" name="Mesa-libGLESv2-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="18e0d0f70645b184fb420819344f4b68cd3d22d627fd8e949f84648ad3496788" name="Mesa-libGLESv2-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="dc6274bde4251fcd0138ccf1d1d944d9fd64ef9d3a0a3ce9194bf0903816a4b2" name="Mesa-libGLESv2-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="8e71009e97c4ae51243816f39fc2f2dcfa93e08a316c265d7254a0fab10e175b" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="11bdc25e60b8c8a81caabb5726121c9069c3ddc37916caaeaf5adef6c08c0a8b" name="Mesa-libGLESv2-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="19fb62553a2c6721b24a8ea34b1d63d06a93de4e4840da93493f905af554f584" name="Mesa-libGLESv2-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="e1fe7d7fb731243492e4f21f94f165b10f16bb10061d19606774003f0f462ca4" name="Mesa-libGLESv2-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="add8ba6248415a70ef7da84cfd7c775d9246ef74755c6c03397d37e9113bb925" name="Mesa-libGLESv2-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="4eda61908aebf17908af2e993dcf25e23b12ec95288fa1e079959cd2c49f2593" name="Mesa-libGLESv2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="4f321d9e9d229d33a0af78e417ba4c4906ad4705b1cf873080b2cf5ef3caf055" name="Mesa-libGLESv2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="865d0e6a47c4640c196cd08f2be03dabdda9fa97e189a49c13e26f682b5b86ee" name="Mesa-libGLESv2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="f3660b41b2ad5482bca4f37af73b2e2b6a668529ad0b91d0a3e9e12735dbc71f" name="Mesa-libGLESv3-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="ae493bbc3789187ed895c2d583eef3a0056dcd8f821e39fb8d1c6cf99aa258e5" name="Mesa-libGLESv3-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="9c5f4fb1fbe63e28a13fabc850ff89e29427ba67f3298ac63b7de037d13c57ef" name="Mesa-libGLESv3-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="ad67282108567457809d7e0a8bf174ffc6639dcb599705860834935da18b1df8" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="66f90a6d55f74967de331f2b6869031e74c90c8c11a889d3f771e2b88f8a4b18" name="Mesa-libGLESv3-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="adcef9cb66d310a2d85d94acf3be9c98ffe80be3e6be6017146ddfb1c7f74193" name="Mesa-libGLESv3-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="998b7a502e350fe9ecefab86516a44be158ba9a11759d224ca066f5483347cd3" name="Mesa-libGLESv3-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="078ebea748a4c45e0fbb2e8c9215f81bb0e95260e5ad176e7d2ba0fe116113fd" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="f267604bff8399c1351ba8a40386841be825f829a5e73dd4d23dd08ff475aafb" name="Mesa-libGLESv3-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="d4428dfb73a894d6a5a745a4255fd483720121f46727ed21aa2ac92aa25a191d" name="Mesa-libGLESv3-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="8e44192c0f3164348bdfee130029dea25707968fe39dbf0838488f5259feb26f" name="Mesa-libGLESv3-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="a5c345553c956699d79c9f8729b7313b2c0829d5d147bf8bc1487a4bf20bba1f" name="Mesa-libGLESv3-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="8e513197191b70bfa0f71c222fc9d3d3d703e5dfcef8163771423a23257b14b4" name="Mesa-libOpenCL" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="57785cec3c3d5bc4a55a000e784d70756c0a17e771d1f86514d98649bfa107ec" name="Mesa-libOpenCL" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="1a8feb5941e039c1d445de94ae6161347a71a4ce87a0191eb527c8a8b6aaa227" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="8357fad149849851a2fed413d151042d332facf03e35118d98b338060e89c6dd" name="Mesa-libOpenCL" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="0efee2c54ddd28a757211b5ac53039b8956323893a77767bce3ba925e3e70c50" name="Mesa-libOpenCL" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="6659017434b5b687a8dfcf667cc6125f292a998e7e2189c060e27abe2233ca57" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="5bb021e8e1a1cf59df5ed99fda45fdc8e1719fd4ee9815e6091163ae0adfc735" name="Mesa-libOpenCL" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="0dac912d6f05e84d5cd98952b66e71496edd1844a9fcf146c10c966c8adf9657" name="Mesa-libOpenCL" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="e33c1b6212e58d6378152c6bb140244207319de120719f66bdedb574f3726a0b" name="Mesa-libOpenCL" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="8aa1ae074a6733c7d228a8bd1161975bd686caa8e7a4ffaede8dd328e57d7b91" name="Mesa-libVulkan-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="5fa2595add57e30dcce00155867615cd2d0b4501ffd83ef2573b1d21782cb9a5" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="82072980ff255080354f8fcfb73890d52debe033654d036c42b3ade18213875b" name="Mesa-libVulkan-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="4baf6bfd4f7a6bc0427de7c02ff0ef0b1a3eb7befd7e2fefb2ed3932285665fb" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="f93bd4fad74c7c3ae5fec2ed76915e8b1b652db1e52ee99daf24152678197917" name="Mesa-libVulkan-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="c2f3c8ba99d0f4456b244da65ff7900212b0f75655acf903172594f9b8dfa74f" name="Mesa-libVulkan-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="d001d819a31ee077e3e298412999b8198672f357b6763265e0d9ed45a51973dc" name="Mesa-libd3d" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="17841a44f772cc0f781067df91c178d184627840b8b646c5e5e43721fd1b8440" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="e7c7a4814fe6af956d1dba4f1e1aa42aa1378a5433d00ab4b3f72392b637aa11" name="Mesa-libd3d" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="a1bf241f42c9900ee2320b46312f448729386581ce8a3b3e043487a63ac33735" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="750c17f392ed47bb425c22831728fce3a2ce6f6aceb7e9be6bf7c9ff1dedc9ab" name="Mesa-libd3d" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="b8935649e4f706e3842f41c5890d4231b16a441227bec68965b24e7e693a7972" name="Mesa-libd3d" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="80ce93e66a41a0083132c90bcf76f93e359116085cf2b20483d249103c9b641f" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="623e5405885b2edd7f904634add015b112e96938a89bcf3e258961a006f19c6a" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="8a1c513c1ca81a9b4b39b48948daa8f142918ecd5a5e5cc369cd5542b1db9e0f" name="Mesa-libd3d-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="1a2a8ba73d00f14112f13d3dbe73ac0c9adeab4fbdf07961525b6edf4c8dd3e2" name="Mesa-libd3d-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="2d01a9de1f37f7ac024e53a34d76206004a92c2c899ac8be46cad4ef328d7183" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="de85a08fbd47968e9e5c2cfb416d99e59424976bad64abda1ffbae8615572c3d" name="Mesa-libd3d-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="b4d4cd0492f628dbeae9a98520f773215994814b04f47fe4f7828bc99fc52f68" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="8f075031d4ccb16382d68040cc71e538b060b859b9d6d066402fe52a961fbb62" name="Mesa-libd3d-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="8c2f5c549ab0968331d45d54e27bfbbcd957015bd0702529124a8ee19d500711" name="Mesa-libd3d-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="e198365a11ac8a7dd4f2a1d932f885b1bfd42f5ad8d967b0d6f8ef22b54b661c" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="14266c256f31098a1de53b3b704e899a0cbfe42aa041539437a7ad299b6fdf2f" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="1d461f64189ae21652ae14b6e673e5f0e13d78236ef0737e5edfd90097a39a7b" name="Mesa-libd3d-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="b061fef50bc93267a00a4fb8325185364141959ba1e750c61ef2ed7ca1371e9b" name="Mesa-libglapi-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="500ced2f1e5c9b07efffb457df1ebe4e2fd15f2a4ff4e517b7f5d5ae5b317588" name="Mesa-libglapi-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="45254e719e24aeaa9acdb88bf9f09f956dcf3593ca70c7fc5017235db0d2868a" name="Mesa-libglapi-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="802dccfeaa5473feef996f2154ce5d9f8631f006c89637e4e9e5a42427cefdd1" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="6722a78d754c2199fd038a4be3d872a2fd2b6ed15c1be9f61b01d5c9d390c553" name="Mesa-libglapi-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="388d52508ed46239be14aac20efd775b2572ccace7ac9130510a779a8bf5213a" name="Mesa-libglapi-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="b6f856a2c1f03a3f22b868fec825620c3c1461d36f7a4dd0820713b5c17ab597" name="Mesa-libglapi-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="7803b1539434c8433a01694dc70e5403986dba913aeaa24d467bf86f8d814ef1" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="b9f1dcd1956de66cfc694e9a9aa4ff4e0ddb87678f0baa9061380b41d3ea0a25" name="Mesa-libglapi-devel" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="1d8fbac26f1a2de78df89d7f27f80f62816e4a8220b577ea52d982cf08d37ef7" name="Mesa-libglapi-devel" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="c4329abd07819156accc6e9878774c581a2db618478b1c6a25a617a504f0f612" name="Mesa-libglapi-devel" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="cf9ee7614f04407e977c164553b9ec6ae3fe302aa770225b04a059b9ee85dd6c" name="Mesa-libglapi-devel" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="2803e5ed22b5d45f55cdb78179b9904622bb22ba0020232dae7cffe3df8a66d9" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="3ad467268670d8aa2823ce7a4ae3b3db7197fe1eb9ae9c211c22a59a814fb02f" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="7782cd90b525e8b48d22f06e4b33a38dc58e1345896154b82ee7282e910f43ae" name="Mesa-libglapi-devel-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="20e5ac0dab2d5d6e7cc596632422e9c1b703ccd7f25fac0d489730bf7fe9a766" name="Mesa-libglapi0" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="be907ea9cf63d627d1803ae092c35b6c257cc038e34911c01a1f5aedd7add764" name="Mesa-libglapi0" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="413a7c39bc24ea3b9843e8b54dc909a3b138adb2081be11f2ea8828841c08d99" name="Mesa-libglapi0" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="f1b0805badfb5c651e0f83d3527c0f701464abcc53ff0debaed4d7e7e8b8cfbf" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="38d31cbfbddf901d188f45a4a2025d6b33e0af2dddd464d9a1b96531ae27d587" name="Mesa-libglapi0" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="6919bac671e833c92f16ee594a1468194fe5e52a23e741698ca815aa091fafc4" name="Mesa-libglapi0" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="c3eed8147158f0e415fbf9ad483f602cf582f47d8bfb02bda1e52285c1fbe41e" name="Mesa-libglapi0" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="63a0134f39fd0f3417fa62f230fbe8b2cbf9b369f06d508534cb207207a82d70" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="7f42082c7681f9f5e87f54f9e1ffaf510ab7dfeeb929311f7489e2af062811fe" name="Mesa-libglapi0" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="0d75acc59b518c3ce709891edf729c8cb01336b6f5fca5b75fd9e603d729c215" name="Mesa-libglapi0" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="f8b9d6146c5c6d09fd538e01f63da6f933d45ce4c5a4099517528c4ea4bfca43" name="Mesa-libglapi0" arch="s390x">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="b1a1f1cb3ec37100d3883d108bceb70d7ec418a8935efb2c76ddd8d5daab0b49" name="Mesa-libglapi0" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="8231fba1d50eafbe5a271ae7070cc6eead60f3065e622d4528d36c240b62d3b0" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="4c34215a5f8386f8e5a096196656b392592fb11598009ec18cb57d2abdebed59" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="698efa0393f25e31d072c473ee5f639d798443249b0fb44301e85882764d635e" name="Mesa-libglapi0-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="f7a3ae15d9c1b330cb3c9f2be89805ad7d2b7f2935cd418293a55f52e9ae5791" name="Mesa-libva" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="16110c480575281889e07f12fd9ce1acfcb9630c1f2cb25aabece0a3f6ebbb2f" name="Mesa-libva" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="07c169fada8e25ed1a02bf1ca4e378d9b2ba37f871f31f4162a01ef4c9f75b9f" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="334ee569e4c0cda62a14c123e5b675b830fe1bb47cd350ccaa549928d18dc80e" name="Mesa-libva" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="e3bb6b53156a1ac02aac379d9d74f63b09c29a4074d11f75f2652321c04d7e52" name="Mesa-libva" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="46bfcdf92c065423e8b094977e9805e6e115e510793544960081ac1f5075a497" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="a9602c6f773b62380df2acaeb9dd91b03e754749d6386655e1a3e2f413bf826f" name="Mesa-libva" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="afc2e026670e69feb938100aaad8db0e4e94b1f8b12fe42493d9c4509521c01f" name="Mesa-libva" arch="ppc64le">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="b0bdb7138d2204f4622e3d4388e7d6d6787ee0d76fca9cc1777f7db28428abc0" name="Mesa-libva" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="f59cec364e381cadf01693bd2915c1acdee6e6c080d9b23033d024da65cc6ce7" name="Mesa-vulkan-device-select" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="7f0541a5aaab4689167b26ef9209dcf5412a71dbd2732987d34e9ee589da760a" name="Mesa-vulkan-device-select" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="e1b440d6f7e105dab32cba49f5fd216905b1808b5fd9f5c611a7be0b7f80893c" name="Mesa-vulkan-device-select" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="7c7cc2da345974820a38b04ba866db6293d8b4c7b60b5cab74bdaf25ad8cd70f" name="Mesa-vulkan-device-select" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="f237f2f7211a67930856a6f9359d6c116c884230d6d52eaad5fc3434eabfe0aa" name="Mesa-vulkan-device-select" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="53d7f07d50df0668d9cccc8f268a0333730719e4c90d8d934f7e0dcd9035af8c" name="Mesa-vulkan-device-select" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="520c894edbbb60482ceba938bdda53d16d66cdd6437f11c039f71cff956cf468" name="Mesa-vulkan-device-select-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="edf72cef35bd640f85fed0a6f085b64817fefb71d2e1e352b3f2f6b33d39881b" name="Mesa-vulkan-device-select-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="bd73969b364b9bf10373bebf2ef265ad1b13f14ecde20f7c761b20968ab6128d" name="Mesa-vulkan-device-select-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="8918edbe9b1606c68a48c7d42a44ca8841d4ff2e5ce2d983fe99643c121598d1" name="Mesa-vulkan-overlay" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="c223ea8c031505c779f218f64c6188895543df4d76390fc16db4649aba73cee0" name="Mesa-vulkan-overlay" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="876846193c969e13c3a8c84dd1588f0a3cd9ca9bb90a053ca9b7f2890863a23b" name="Mesa-vulkan-overlay" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="a52bceb6ece9da14e6884a256d3f1e95bb7a2994471203b565a8e92c9feef195" name="Mesa-vulkan-overlay" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="c98123303cfe6849c62c4e2b5e48abb92a5a1087c2c3f417b07253722bc2819d" name="Mesa-vulkan-overlay" arch="aarch64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="9025287e2da35548073466cb20fe126aa178f33c732e394671b1faaee4d3d0a5" name="Mesa-vulkan-overlay" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="966138f55061217e0c9999913dde06c38e6e340536e64997bb0f0ea8ae1540aa" name="Mesa-vulkan-overlay-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.3.1"/>
  <changelog author="sndirsch@suse.com" date="1622721600">- update to 21.1.2
  * second bugfix
  * mostly AMD and Intel changes as usual, but also a decent amount
    of ARM fixes and more.</changelog>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
</package>
<package pkgid="f4d59ed5429fc125b599a7bfa9a4ed3935e3595f4e4add0cf6f8b90d19d450c5" name="Mesa-vulkan-overlay-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.6.1"/>
  <changelog author="sndirsch@suse.com" date="1624104000">- update to 21.1.3
  * third bugfix
  * mostly AMD fixes</changelog>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
</package>
<package pkgid="45d9f93321a2f4b3cc8f5ea741ff94c7a710912e22adf656bd1599415a55c381" name="Mesa-vulkan-overlay-32bit" arch="x86_64">
  <version epoch="0" ver="21.2.4" rel="150400.68.9.1"/>
  <changelog author="sndirsch@suse.com" date="1624363200">- no longer apply n_drirc-disable-rgb10-for-chromium-on-amd.patch
  on TW; no longer needed with gstreamer-plugins-vaapi 1.18.4; more
  details on
  https://gitlab.freedesktop.org/gstreamer/gstreamer-vaapi/-/merge_requests/410</changelog>
  <changelog author="sndirsch@suse.com" date="1625140800">- update to 21.1.4
  * fourth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1626350400">- update to 21.1.5
  * fith bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1627560000">- update to 21.1.6
  * sixth bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164800">- update to 21.2.0
  * new release</changelog>
  <changelog author="sndirsch@suse.com" date="1628164801">- enabled build of 'crocus' Gallium3D OpenGL driver for i965 "Gen4"
  through Haswell "Gen7" graphics (alternative to classic "i965"
  OpenGL driver); use MESA_LOADER_DRIVER_OVERRIDE=crocus to use it;
  in case of issues with video hardware acceleration(vaapi driver),
  set LIBVA_DRIVER_NAME=i965</changelog>
  <changelog author="sndirsch@suse.com" date="1628424000">- fixed build on %ix86 by removing "-flto=auto" from optflags for
  cpp</changelog>
  <changelog author="sndirsch@suse.com" date="1630152000">- update to 21.2.1
  * first bugfix release</changelog>
  <changelog author="sndirsch@suse.com" date="1632225600">- update to 21.2.2
  * second bugfix release: a ton of work went into panfrost,
    getting it closer to being conformant (it is conformant on
    21.3!); fixes for ir3, croccus, nir, utils, llvmpipe, gallivm,
    zink, glsl, v3d, vc4, intel, mesa, aco, iris, radv, and even
    osmesa.</changelog>
  <changelog author="sndirsch@suse.com" date="1632744000">- covers jira#SLE/SLE-18743</changelog>
  <changelog author="sndirsch@suse.com" date="1633003200">- update to 21.2.3
  * third bugfix release</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1633348800">- Fix build with LLVM 13:
  * U_gallivm-add-new-wrapper-around-Module.patch
  * U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1634212800">- u_fix-build-on-ppc64le.patch
  * fixes build on ppc64le (boo#1191569)</changelog>
  <changelog author="sndirsch@suse.com" date="1634299200">- update to 21.2.4
  * fourth bugfix release
  * 300 fixes from the new r300 maintainer! Additionally, panfrost,
    lots of crocus, some freedreno, intel, radv, core meas, gallivum,
    anv, spirv, gallim, aco, i915g, lima, and llvmpipe fixes.
- supersedes U_gallivm-add-new-wrapper-around-Module.patch,
  U_gallivm-fix-FTBFS-on-i386-with-LLVM-13.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1646136000">- autoselect libvulkan_intel package via hardware supplements on
  Intel GPUs
- autoselect libvulkan_radeon package via hardware supplements on
  AMD GPUs
- no longer install libvulkan_lvp package (lavapipe=Software
  Vulkan driver), libvulkan_broadcom and libvulkan_freedreno packages
  by default, i.e. no longer have libvulkan_intel/libvulkan_radeon
  and libvulkan_lvp packages installed at the same time (boo#1180522)
- libvulkan_intel/libvulkan_radeon/libvulkan_lvp now require
  Mesa-vulkan-device-select package, not the other way round!
  (baselibs.conf also adjusted)</changelog>
  <changelog author="sndirsch@suse.com" date="1646308800">- baselibs.conf: readded mistakenly removed packages
  * Mesa-libVulkan-devel
  * Mesa-vulkan-device-select
  * Mesa-vulkan-overlay</changelog>
  <changelog author="sndirsch@suse.com" date="1651579200">- _constraints:
  * raised requirements to 9 GB disk space and added aarch64
    architecture (bsc#1199040)</changelog>
  <changelog author="sndirsch@suse.com" date="1656936000">- change default driver from 'iris' back to 'i965' for Intel
  Gen8-11 hardware; that way we also use the same driver used by X
  and Mesa (boo#1200965); related bugs: boo#1197045, boo#1197046</changelog>
  <changelog author="sndirsch@suse.com" date="1661774400">- revert previous change, since it resulted in Xorg and Mesa no
  longer being able to load "i965" driver at all! This affects many
  if not almost all Intel GPU users. I can't tell why this happens,
  but I'm afraid we need to act immediately (boo#1202850); reopened
  boo#1200965 for now ...</changelog>
  <changelog author="sndirsch@suse.com" date="1661860800">- changing default driver from 'iris' to 'i965' for Intel Gen8-11
  hardware again, but this time the correct way; "-Dprefer-iris=false"
  needs to be set for both builds - Mesa-drivers *and* Mesa
  (boo#1202850, comment#29)</changelog>
</package>
<package pkgid="989f90ced529aba1a830c12f375e6426c541cbdf4b85266c374c1e96a59ab234" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="f1704470aba486d3a3068e580a0e78d2af6e865371afa19ab3acdb89575c4008" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="4a8ecc52a750b32d5588b0666443d3711d0794bbe81c4c3af38090a804fb7425" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="44c937db2ea51c00a414350750e6edb44b31499696d5cc9fc9615468527e2c51" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="4ea6f5fa181563f09e9f9674134bc80f19d59bb5b421257f609b567f09719477" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="dfc34d7c5c07d64b290d46814672081e4b67fab8331c660e2723fb8f96328824" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="721e3208f99d5f798d94178c215b917bfeafa7139afa2b9e8148262dcbcfd0e3" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="c80aa3dcfc3a3fa40e9db5837a9d6735f74656c8d2a1bc85b9bc72e96245c4c1" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="b35dec0f1bfaaf644f3b6e3b9c6793c7be3f68e75cd10234cb323dda20011d4f" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="182d668917498e275e24fc00f151a2b5c31e4f08a0004d187b44b4fc2e54be60" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="9cc97d8854a340c0bf745590cc6a763420efd063f2eeb5b508089692d37cc3fd" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="64ea77ab38abd45b54775c42f299f146a5e57b56de75c0ce641d630b1764bba7" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="4c29c8825f8edfef160a35298ce4494dbb4c2e928c0327a085c26b6d224e0e39" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="7265f615d06ec1d5666818442aa96e2dc24af31e2a751242332369577e8ace9c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="2e64e06ad5c7e90929ca6d6beb718b0c387279bf7d319f386e44d64b0492b214" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="2c125fb57ef25029e469a308b99f65ae5d43f25c9b9e41463a506cf868ac8b00" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="082820fc9a64adfabb8ed08413cbd139d74a88ba047439e9d333fa873f900c12" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="a3e498de38a582a6d776aaeb9d7c7fc2114ab47a3fab67c2b9fe63b7fcd741af" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="ea4cc0e2b521c8ecfc1939a3002ae95f8a1418258fb8912bf8d5dd37904a83e1" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="1be7f2de5e75936eaec3965e1bdfaed7a464c0da7f4c2e8f891abf44079828a2" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="c38fe97357aac598722f9f12dc9e34e7e454b5049d7e88ee60a8918a97f839be" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="ad1e48c7852d04237c8fb8962f1fcbaea5b01f0bed34ed24036b79ed5576fb4b" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="dedae359cc3597ee269439374ba0634cac00e76f3657bcdc38d7398fb43c9edf" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="122492d7e6ac0b6191336c881a831ba1b7ce1ef4c00f3b0abda51b2df2d1cf8f" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="739d8960b9a26ca4b26975252f2cfb3a5429f02c9e1df25f0c73e070db3baf99" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="2006ee9ee6416407475dea69bda89c6adb9266b3d557aaf7c2cc7e2e3ef8a505" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="5cdeefb7ccc3fcc91ab692bdc25e20720839d1164aff107374c6dd910fe3cc7a" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="64d8e8ca81e39a9d57bcfe32f1cb073d74c262d54b5cfc4db895e503cb31dff4" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="44f5edd1806f36cc011fefb3bf0394cef9b621ba05ec25f77bbf33586f844fc7" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="c09ca72e081d7d8271de1121bda9caa034e4a5da20956c89040b1975ede1a736" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="0fe8191c54c8a0c87500c5db9b29373985bb9e9032d2354a1a1eedbd613288d5" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="badb9e901cd621f1ec559481af6d8d79c7a9f1fabe0ad112c888c18f6fbf356d" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="1ad745c7f7f386f6fc231c82ffa9d8d901e17429e5edfdb48f247e44c773c427" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="ff1c4456988152d234889b4c066ce88c65dd05515baec3d48145b12980bfb0b6" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="b75f1159e96290ebf3f73c28f744a6f1a12c9f7694c52bfbd70ac6b012ba2b4b" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="29cb18ab8a23bd57fb7b3944c89e36b0a84c483a303c7abc80d8660949a11f94" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="849d2347d00b4ae7ec4bc8c2b89a63823d3cb9c978679897afe74a133ca3a544" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="1270f9c57c8d3ff34bc95bcb4cac96c63d2cce8e7d344fe0acad67c81c32ad24" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="44190e9029aa6f68fe3da66a19f5111e8210ef158bbcfe64c762aa31d0f53d0f" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="f898adac86cc02155570194dfca38b1b2343bceb00310439bff21409864c8778" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="795bd3bf84dc69c3bee8c74bc7216a001c431ac4e660e7d0ba817b9a637cd31d" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="0ff631a633d84bc10c7e64f6a92ca5c13eea2482b4d31bf64ebe556d6cde6eb2" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="fafbf93690972b57548d506bb892fff93b6547218614928e1629c1c98f0f9bb2" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="f8210e0bbe7fd96844eb1138e759638f11caed34411d8602f55b166adbf277eb" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="2cabacbb33ce7941e4d6a8669f60679532ec63d1e812210874a89ab54fa48efe" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="3a61b8b4ccae359659d5a945fb307cde059d0a244c61e4373b4787dafc601003" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="39305637ea2da6b4fdee29c71383fd1ac13957dad8441e28e12f71818c5b107f" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="583916dc9edeec647747cc97cc4bf88894210980d16b014843f1e3b541367fec" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="1279632df277b95542bc2a578349d6831fc31e9df43d6a4651de52732416c00c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="802a9597d830fa4c5c05dbabe0920c0aeab5bdac9051cf8c501014cf5b93abf8" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="fd566c089940493d575733907ced80bac4362d660db26e0bd30d66071fc46aa3" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="4749644cd462e83e05a6ed8069011a78faa85eb6ef196f3b5ef4cee5d7f21ced" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="6ec4ae7137febf25da118c87479572ba17735558c1c7301fbc984fc6b8c66303" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="e022a705b8a45bbbe4236329283664b11ebc4a8326d63659bca1a0a42357dc82" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="71f9acd09803c626a981f38ccded72663c8e095342b94ca5e72e14496c228752" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="afbe22c23e3303e237820cbdcddbf37520fe539e9b76786abbee609a801bd4a9" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="fd23cccdac7f92c6bbbefabacd7feaec0bde31e59a34c2e24c91157abcd28bbb" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="a308cbd0ccf520779d6af8020a5a13ee315d950c86290bf02dd3b8d9349601a6" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="12d7d5257c15680abedfc187797346988b22810dba61e466f22220c7da45e686" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="e1f22e5cdf61a271ba570e91d83083700ce2ee7c6b4bb221e1bc7326bfff4d74" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="9b70f58e416ff8bd627c644bbdfb5b2a5fc99be54304a307e7ea82453c59ab0d" name="MozillaFirefox-branding-SLE" arch="aarch64">
  <version epoch="0" ver="102" rel="150200.9.10.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
</package>
<package pkgid="56defb51653b85587a96cd624c5002b9791e36a0844da2a41873eec1685ca8ab" name="MozillaFirefox-branding-SLE" arch="ppc64le">
  <version epoch="0" ver="102" rel="150200.9.10.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
</package>
<package pkgid="c10c450ef079c6d7f09bf6e79469b1cce9d8b1b1007c4f136f1e9bcb508c0922" name="MozillaFirefox-branding-SLE" arch="s390x">
  <version epoch="0" ver="102" rel="150200.9.10.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
</package>
<package pkgid="0d29e11a518ae50063b79a4f89f765a18ed724ceb501f86a1aa50a1f9f1e0439" name="MozillaFirefox-branding-SLE" arch="src">
  <version epoch="0" ver="102" rel="150200.9.10.1"/>
  <changelog author="pcerny@suse.com" date="1392811200">- packaging license file</changelog>
  <changelog author="pcerny@suse.com" date="1396008000">- show protocol in URL</changelog>
  <changelog author="pcerny@suse.com" date="1402660800">- marked as compatible with Firefox 31</changelog>
  <changelog author="pcerny@suse.com" date="1406808000">- disable call home features</changelog>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
</package>
<package pkgid="2a93aee328dc975f70cfff1242e38a1666b5ea5ee853c6daac5588af2f872ef1" name="MozillaFirefox-branding-SLE" arch="x86_64">
  <version epoch="0" ver="102" rel="150200.9.10.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1657022400">- change version to 102</changelog>
</package>
<package pkgid="6736d394c0c0c81a362b956b63dfaa93f6bba832d8646aa87ebc71c927915846" name="MozillaFirefox-branding-SLE" arch="aarch64">
  <version epoch="0" ver="91" rel="150200.9.7.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
</package>
<package pkgid="045657503e8275ec6bd9fb18dedd513011ac516605f0e4d2b9183c80ba62f434" name="MozillaFirefox-branding-SLE" arch="ppc64le">
  <version epoch="0" ver="91" rel="150200.9.7.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
</package>
<package pkgid="530ce84802bbbc573507aaed49ec76a43e8f73060aee078328cc74de57540a40" name="MozillaFirefox-branding-SLE" arch="s390x">
  <version epoch="0" ver="91" rel="150200.9.7.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
</package>
<package pkgid="4625b3f61fb1c34659039dff6532e235e043a7c525d96eb7ce042ab8a08a4715" name="MozillaFirefox-branding-SLE" arch="src">
  <version epoch="0" ver="91" rel="150200.9.7.1"/>
  <changelog author="cdenicolo@suse.com" date="1392638400">- license update: BSD-3-Clause
  please use SPDX-filenames.</changelog>
  <changelog author="pcerny@suse.com" date="1392811200">- packaging license file</changelog>
  <changelog author="pcerny@suse.com" date="1396008000">- show protocol in URL</changelog>
  <changelog author="pcerny@suse.com" date="1402660800">- marked as compatible with Firefox 31</changelog>
  <changelog author="pcerny@suse.com" date="1406808000">- disable call home features</changelog>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
</package>
<package pkgid="d5f87ecfe92c84109a2b670b26ad97b5ef2d1fbba5b243eb147a833c590cb5a8" name="MozillaFirefox-branding-SLE" arch="x86_64">
  <version epoch="0" ver="91" rel="150200.9.7.1"/>
  <changelog author="meissner@suse.com" date="1417867200">- version should be 31.0 instead of 31 to meet requirement
  from firefox</changelog>
  <changelog author="pcerny@suse.com" date="1439553600">- bumped max Firefox version to 38.*</changelog>
  <changelog author="pcerny@suse.com" date="1446638400">- changing version to 38
  (bumping up max supported Firefox version to 38.* in the extension as
  well)</changelog>
  <changelog author="pcerny@suse.com" date="1447934400">- turn tracking protection on by default</changelog>
  <changelog author="pcerny@suse.com" date="1464868800">- changing required Firefox versions in the branding extension
  as well as in the .spec file (requiring 45.*)</changelog>
  <changelog author="pcerny@suse.com" date="1465473600">- remove extension part of the branding, since it is no longer
  needed</changelog>
  <changelog author="pcerny@suse.com" date="1466078400">- fix homepage in the GNOME schema file</changelog>
  <changelog author="pcerny@suse.com" date="1497787200">- change version to 52</changelog>
  <changelog author="pcerny@suse.com" date="1528286400">- change version to 60</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559822400">- change version to 68</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908800">- Fix wrongly displayed version in Help -&gt; About (bsc#1087200)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1559908801">- Fix bookmarks and clean up old files</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1570536000">- moved extensions preferences to core package (bsc#1153869)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1594123200">- change version to 78</changelog>
  <changelog author="cgrobertson@suse.com" date="1628683200">- change version to 91</changelog>
</package>
<package pkgid="8d91d76fbd80abed7265f46df1eb6f88301b6f126d986e7b7d4905e5d592fcf2" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="95808675538f185e53fd539f5a5fee8abaa70cf251ce18a19832867d3b0153a7" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="0ab967f800322eba15c34aef673e79f4db99b559d2649bb879d17eab27fc77cd" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="790f170aa6795d8e98fc5c23e7d1a9c7d16bce69e3aaee0cff7c735073ba2723" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="36c7d60c7849ff23e6d0409925829f2db48c57ed2d40ccdd7e7897813ed892dc" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="a3e5e435ce8ecf2f9dd48bba9953e2b39a5a3e4bf3e09fe27e7ec37aceb0f8aa" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="5089b70af76d0338fe40b9fd68490903ee6c9c7cfd4adabf643caca59ae54fe8" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="fc4d99ac29668203786dfeaada3883da8dd6d71a64606aef2cb331cb33ccb969" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="bd10a004fd233b0fbe19f1756e86185519d908170d6761d56450a8056eff3255" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="ce6374f7b498534fa6a2fbe4b34fed6bc30d76e4bdb3ba0575f464b589ac2298" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="29d2b41319b89e8b999510cdd43a18f4180f7d4dee994d30ca8415638d4604a3" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="b9f1ed4807682271f93d333f13a0b79e93f38b6eebca9fd0594c24573336a19a" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="5248e76674677c2edcec6d498900174d7f7e6a7275914c1c91db32778ae56072" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="182cedc41bffbd97b8ab404718fbdf76ce4c75f39b60d4831488a5b0be117dee" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="717b6d8e55433cdde689ad8d939a25b587a27ae8fea30d848ea988782cb2bd42" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="fa524b48f37de5bbd20a65211481a8179e78be8e26ae87e2463d7b2bd88148ca" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="d0dcf44dde0357c6e023d24bf994bc6c899ed95a8c241ba2f928c754a53d79bb" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="2f29e19bcc686b32b80578a71817da0b8c8b6453115b67952218231312ed62a7" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="fca8da6fe55f188cf1ad21552bcf1837972e21b034c0ef7f50c086c93cc2e671" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="f587213f1ecbc9261c3b0a74af908fdc80dc6e408b8e3f1a00a50689097cd3cd" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="3330bf5a33a60b57a026fce3944d8c12ff259e1c723ae56e01fb29da8ceaffe9" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="cb8c1b9921a382e9d7464c50914ac2936e12ec2d657950a06fcc9b8704b218d9" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="c1d9b15ab64ee7f305387e4751d584ad47e0ab558d28809116365da8d10d1c35" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="aee042b56de8042ee566cb2127582f9c7c79e0f691476254ee33204ff577cc07" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="ccf0511e7203582524362f29756631135c2fbc4a667da8ca75f2b35af08540ab" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="f8c472ee778c7f0c0294fdca6c39418d17b1246c7efee93f6bf2e70aa69e8020" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="abfb1321aab0b158a1da813a67af7446cb1a1d2d9d81bdb5e791a32e80356fa7" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="398c4652abc88d07b9576c29e18f740ceea20b49cc949195f21620a461ab68be" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="2b44b9dc35118f57fe3bf934df5204d9bf67fd04bf44a66dd2c542a26e534893" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="8cac07996b9f92134e18dc04a456ab90170df74c3454f8f3eb1837056dabbb03" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="d3fb5d7c4ba43613a3d015506e99205a942e59d1e53348cf49e4451640bfef5d" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="ab92cd9de9e9bf83dfca5323c37faea16b338cf341bd92ad21545b762132a66e" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="be79f0f240c76cbc1abaf6b6a8a0253d0498322a0368f1463f71993ad30f37c0" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="6a3e4266c4735c4f35fa5cabf1b008550fe7aa4136c886e35fd30ffe6c994942" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="060db4f1566cd79d135eb365d824bd4014b811375a9de6612e12beec8351246c" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="aa178102615edfb883ae4bac666db4859c62f60c44630aec20ffc6b8edfdae33" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="ac23bf8ae7628214f63acf1fe42592fe5c9ffefb41f51dff3b8657f1c1f9529e" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="6e4fd1ac50b6839773d8c53ed4c4e3d83e422b03bcf23c32632acf9c84db795b" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="c4a30bb835049cd2d2d0fe650accfb2fe14bd63e7093da9f0e08d4c9d1260741" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="208ad7b09d8722299362e98ae4e42a67241b4407c0e95a125e0d022b4847b5be" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="26a3118f6a60cdd5c2dcfafe6339f8a3fb50e5a8e719f3fdcd10a6066654f780" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="ef66a342260af0b83293a7b66bc64f3d0d203d927557b9075b3bed6feb008153" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="dbc4b01ac46a4a209bf493095dc1e28539f8ca9525f4e8f8117e6d5c5c63b9ca" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="e3ca145ac9142966de93e88806f137a7caac8f4fea19ab42eef6d0e8200aa681" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="3f7d299216f774062e6b2ef67df948d1429c16b185f5b655ef336562f1319bb9" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="2b4563bcea97fd4b6a6b0ae045e747e048fd2d4507c8f5ed9836ab98fd004bf2" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="e02033d54d49931da681bbaa14d441c9910a2103d02155ac72302f6ee79d795e" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="9b7930573dff00906f8e6407eec985e79612ae8f5963649bdb48829cd23c7dc1" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="d2d2651e71bb768da2c7ca9f95b563472b6a9fda0a2fbf523b5112ddd3ade0cf" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="87fa795ea1840bb19287f114c64df25513c887e5e41d3e62157664ccc76b3cc0" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="a28e3dc17308266ba6088eda9f4488c98cb7efba80f1b095154712a7985fba8b" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="9b763604d1c4591d50644fd739256b42136b26e8ca0e9855a2780359fedb4681" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="b41ef097706c090f63781afd4f0dc723e202a4584eea5c5166240009123e9b9c" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="93bbcdaa84712faf9b35d0bc9960232a8337f2cb69448e48a7371638294a6aa7" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="0c88ec37c428bcca59bcce05b118c7135faf500d61300a4eb977da089d46fb59" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="4e90c79a02ef59fde60c44d899aec7fe00860bac1db8de6cb18d93ff524fdfbd" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="3ab7edaee54f7d87fe52c60f31861923ee2928816f75af8623c652847edbecd7" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="d623d6c14de87a3e06286c2eb825e11fd558a8493a64cb9146c8d117fda8ba69" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="d3c93550e975bf87965a1c0cd9650bbb86d2134deeb0ecc10674f94ee60bca32" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="5dd843a42f18a6354e8d3a0eebd049a0a93f2d4e5c5085468b6c556ec9d11614" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="23063de409a7d2f4356592263e4e5333233dd374d5bd39b741a8644e7f4f95d9" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="6b5cba48c1a9e6c9c8dcd5fd587744be2488f1360c81ae5b7f57a4d994aeea85" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="7d9d9eb3ea09d5abf755901f7107d05b45f4286630d63fb039223b5667f5c758" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="1e7c072330f30d67dd2c984ef56f68dae01a4858153a42f7fec32ec03026878d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="7f4434891e9e5083ee1c69ff5057ad75fac6005369c931759aa876185b8f2c59" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="248f111e4a11e353d960b92c533372b48c13cbab2561e9316b6e6e4e162261e7" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="c88a5b66bf32b93430184f226970f834c44924a42f1d4e92f72cf19cc86b4d0b" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="967ed45ade19fe9ba1ce21d2dcf586de59476efc9b9fc424a6188c7f3a049fff" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="b9e5c24578449aed797a597304de59763848769c6e491beddb4deaee4138aa66" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="7e76df58d650db2eb485f1b4a5a89c92da27411de4dffde2277907433c1d224b" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="33706794af6967169214c49c2b3ec8a1bd55cdf3698de50cd84880757ef1a8e6" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="9a7aa2cb1ee03a0e145a191533a23a55f075184e010e485dd6241ca833a64b05" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="41178f1c04611e814c2f366fdff824123aab1c7db1d38506c6c46df3be3aa908" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="4a82ea80768880b99b1a5007efdfb0b01bdc909f054c5b677276d6d54f2d8855" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="386771a9951007097958833b61d7e9744fcc5c089d69c82166f4f3c42e5eef92" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="33a8815dba0217eb2bfd91e2c18e2cadd95434bc7bbdb45c3680171431d4fbea" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="ee25ae339ee900fb3be6b1a077cd58a9a9967487fb1511097e962c60f379e31e" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="db142ff5f5893804140b209c7446b435e762d20f70c581ec0af1340f2fc462f5" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="6c0768c5b3e0790dff43f1c8338949d408d07a5d6d268cdbc53206df3ae78a69" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="07ad057a03440e17a8cc9f617aa7bb01fee0b8eb7fea22bf39f98a6c0225708d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="cc1beeb7f304ee25f9cccfd2dfff225447428adc5725146418bae154fc116b74" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="37fe79c3b367e195a59ac524fd68e6177fc4ef24e2e2f0977ef2f2ffde4690fd" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="f771496df4ff91c03befc86afd4c2e8b754c2845d7f6bfae3ecf53cb020a7aea" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="404cebf2500b6be4dc23ac35c2952e6114fdd73fdd369e2be23dd3b2fbce7c16" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="366c35222bdf7f2b07dbd9b1c04d6adec8f1cbf502bf8a13d74edb044c28f90f" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="4a86773ff8a63f80d1315991f185df70877f4a317854497b1453f93ecead4d78" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="4f456a152eb266a3f1488307323faa870f955288d7616dbc7a9d2078269c6290" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="508ef2b98956a88739c037512562a68dea81aa2d99b29aba8b6c478fcd003c1b" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="506fdf99460460cac0da1a6db5b592f6fa3dc02921a196b4e9fd524c9bb35253" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="2f645b58fd23a168c0d965d61e11d359c79fd0466bcd1d6e9bb61be6c62e4022" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="f240a920c58e7920972c37ef9bac20b42dd8ba64837a7cc9bd8cdf0d4442cdfb" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="f07788d1422b3b0d34932f46bcf8f5b0bb720ae93f346f33aadf87a482873a84" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="9f3e7e7542889e45d94d3ba4621180a5c65ff393bb345abdb46c68d2c59daf8c" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="8da4d83a925b95a7235abd423aa00e1370498fa0167bfcdbb5f9892746489f16" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="fb384ec9e5c7518db310f233387bd48134735c000dcc27a96f1c5c5b7ebe3051" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="1d8d9efb54ba2d2b3e3a13f34eac79e8135be7c0b83eee5d85ae4527e84c61ab" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="03d14e0d6f4f59d0bd4ef9bb7d18dc3ecbb7a43617a285519b20ca0c3c74e201" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="5b733ded3bda91704a3abd55c81fb1beb9316f0900e34f1394422f5473e63fc9" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="3119f89d310b1ac81d8b06dd7882e8dfec95734b15c018a9358ae59652e34b01" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="1c217397ae3a8583488c81989a1bb9e90db1a37362712f7d806a5a0c8f2523ab" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="080ae349cec27674c9e31fe7f1da87e2cb0b296fa6ecb4cf72cb65bfac239e6f" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="e558eaecb4461511c33ba0e072c9f80f09955babfc79f359ee62fe7c6c5e4e60" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="f346f26a36d984096423c6eac728dee6a75dc56a8619d75b1618bb3d50e67b88" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="aaa5a73b3116ee87c8cb4340808724a3feffb6eb20182744eabce8d5ee3bd3d6" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="4fb4875bbed0d247c69eeaf0b6c2506db26b8332cb62288e6577cd208a4551c7" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="ed31f95f8a13db05037baf7380e06b894bc5df28c8bdfaf7f188e5d715ce9f38" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="08723d53eedddaacb2a073df890f7dcb47b8da2fa61e3e6cafae73cd678cd386" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="8b2915fe3a22395e2e96675004051e42c1f3170b6b766ce2636e5aec91c79396" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="5ecce38e0c43d95d2ca6ad8bef5338da0a57e9dd314ca21ca2bc86e229535df9" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="dbf725d4c857fc12063af18b11ce3213a6f5ca6e86e4adfa1a57a6789a94a15b" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="50b1fd6da068af1b74251d07884bb76b3cb53ad3832a1ad02a5d1796e627555e" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="465ba647b6786af27bf78c10ca4a5af519497f2091174186f651d867947c9bd7" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="d6032e05d3e9cd7ce306cf266f138a31fbf64f6d43a010f5d262bee03be6d80e" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="8009bc7539451134e90c580268d0c1ce647766ee961a1576e86feea342254d4c" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="4afbd5e4664effd1cb58cb0d9fa8380088e3531679cab165c100d9b96af4fe21" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="fce9a72af5e60b7ef8b5302ebfa2c079a7134f7238223fe8644824f273a2a66f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="4179cc6c1bb6d57f3f310c9a533dd68fcea2febef1eb8e39df666c954c442a4c" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="bbfd27c5f64f426e049536a308980b8c3c5e52774ad0042fa95a5b9dd0e0aa18" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="212fa6d02b347b2f0bcc567facd23dc13c902126ad9c773090e3aadbf11ac34d" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="fdb66ac31679ad2cece52826a8b80c340a7a00e0edfb3e2621496baee8d0ea6e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="195e14bf2554907e7621ad883bbea5f8fb347225b066ab55c8531bf319a24f1f" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="62824bb63ce595e9f644d4f336a1f085b2b4f7bdb91ea545e41b44cda76c50ce" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="42739d955784dd2ed8691ade85a52bfe047bace91ad318ec8a9df9e3e37fee85" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="e675d597349d0d74ae6e68cd0b58d3b396fccedb0dbcf5bdddec6097530439ae" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="875a3fcbf451151abe491c613efcbd3a57be6e29712a165d1a81118255e80850" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="401eca9def0ab5857ac03c4919c682b3061a975781a5b73eec887b71cc3843a4" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="bc5c983e1968218f34ad04b12fbf85b5cdc10025c7c3ad391ca7fba2385c708f" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="21c74852d4f63c053aaab94de7c810910619950b0beaa3e02728842a4f0bc13b" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="2cbea4a2a662a27bc0f108adb6b9b7c251c1f7c666f0003d925403a4b0a8e5e9" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="4090991a81f60146bb3cb9394b69f066d220fac9d8741a4b9e141abd0ab5eabd" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="a423c75bf985210c71525d0aa6a6597a247529d9d8ed4a059327cbd2623832e7" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="6ae0605d2fd22034d6b91007ac37ee14e3a90d2c45811bc4a9c1e8efa917be20" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="728d6b4b7a4b24c636e2d556c4b68ec60a747fd21b6350456c2c794a24fe952f" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="2645a0a6bedca220be2ede640006cbdc10705fe41a2f01839d4ff9dfc3f43b59" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="e6d518cbe6f51520a4d4597438d8f318f71ec4fba9510a69cc35eccbd9f53cfd" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="10a717047f3bab9044a20be59a12c95987580c0f5344518ebeb40999e133adf2" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="0097c3e9fad4666effb0b7e11f21b22b3b0b9d0e08dd3b5753de62625979d152" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="9d8bb04687490a1ad30bd9ea9fadc378458b08c4f9d418cce07bf562dd4fd1b4" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="20a151efc6d1a7a788d8a772265e0d56ca2f1943688a398f345c6889961113d7" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="d125c236293c2eb72dd802602cd4e441a54d83afd4a52bf6d1db3d66c551463f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="a818438eced3914650201d4247057733ec7a90795bf97c87e9ae45b4882c623d" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="6c4aacb3329aa186d335b1558c820d50c716ddf66a970391f92dfa5387607311" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="f948d85315fe0706064521c4747dbeb8fbb55b83841dc09b0a687a2c25700041" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="12622fc71b48b4fa7f8e260647dd2b40e0b78030a16f208e6deb51ac5d5a0a88" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="60fb4ce8980c4af3c448771eae73dd1fede7a1ab23d54fc679cd6c81f7b3c8c2" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="3f064a7d669c367e84ce119f35763390b2e5d40ec8ac5313df581e07b9ba66bd" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="04d886c27ac5ffce72e1ac6e1c7e00ff312655d1cc31d6ded5a26ff683138b8f" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="a75acaf5bc855f7cc8984a6ac2d171f86a5422b75de14228bd385b5110253fd5" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="102.3.0" rel="150200.152.61.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch and mozilla-bmo1602730.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox 102.3.0esr ESR
  Placeholder changelog-entry (bsc#1203477)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
</package>
<package pkgid="45da587741c1da9ae935ec55ff881dbe63491d5470f0dc1aedb96509e828a374" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="ebc515c34d04d552aab5c218fcec39be90be8b5ccc66e8d3e39e23e15d294088" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="fc9424feb3dbf6f64e3dd1299b0a57a6a800cbbabfe66a3d486b178b035f4bd2" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="c81ad28819f7669703bb8c7d6649f09dfefb880932286c90eea930abbdf9f47a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="102.4.0" rel="150200.152.64.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox 102.4.0esr ESR
  Placeholder changelog-entry (bsc#1204421)
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
</package>
<package pkgid="c65ffcbde3099679ad0c001972d66699f412c963338d04e9667ebba4010f558e" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="5ada9580b350ab30c9992fb0e546420cfc1bf9db85e32cfdda02d172d43a8fcd" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="593474e98f89e94c71ededed4a052ea6a6ebebf9f2fbe7faa79188b8384ae535" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="53b4ec752390458a3c61ffe88ac0ccb43f6459c46c8b2a3bee2bae0631b5498b" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="102.5.0" rel="150200.152.67.3"/>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  Placeholder changelog-entry (bsc#1205270)</changelog>
</package>
<package pkgid="f44ff2c3ee6db5772a77219a3eeccd634c40f3bbdcc2e292f60f8d71cdf7034a" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="80d04c7a0abb7734fc7cf3a36e785ed142388fa25c0a420c19e42952cac82a76" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="3d3d13ed5d7ad6ded96cf33f6dfc0da770547886e09d77d531801e1a1d7d34f0" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="5ca80937117bc2b5f5ae29ffba793bc05812719f537a9f963b8b4d8beeadb9b2" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="102.6.0" rel="150200.152.70.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  Placeholder changelog-entry (bsc#1206242)</changelog>
</package>
<package pkgid="c2194d9165c599867083fa91b12e5066755a33d8d99327143390c8159286543f" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="0e2b8edbd7c32b8f8674c7f0a7a6db7aa2cc3f0c284767e2e53460c4beff0b59" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="23d570f4937d0053555986d16644b6389c767a0c4922cc014485b07db57aa862" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="cbeefa50ae64fa648f11edbaf4474cbd27e43587b4a0f4e9eef05099b8fd7489" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="102.7.0" rel="150200.152.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they?ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat?
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won?t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we?ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice?however, if you prefer a bit of notice,
    you?ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox?a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries?is now enabled on all platforms.
  - We?ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We?ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We?ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We?ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won?t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they?ll be
    saved in your preferred download folder, or you?ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They?ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search?with or without
    diacritics?in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field?s context menu.
  - HDR video is now supported in Firefox on Mac?starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on?just make sure battery preferences are NOT set to
    ?optimize video streaming while on battery?.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies?including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin?for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  Placeholder changelog-entry (bsc#1207119)</changelog>
</package>
<package pkgid="fc70176de752eaf4d0b4a5e49b622e0d38637e23c4a4355b78a88ffc691c2b28" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="26a985e2820a83f31b5e209d8642b37f9190be1ea286461245e970e28c4b3fe5" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="1e12dd81101197e95beb2767fea28be433ed089117b04575884a4664c82beeda" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="6d02ab5a8b50798cc30d9dd356335f87ca5e575a89329e4bea8ac8c084236050" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="b3ea50234013298e1eb7c1dd5bdc05556a1d8b626d706b833eddb238f8245f8a" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="7d573ae3411e63511895fbcd2a29e92c7b6e7eb3f1956fe35cdf51ef87c98ce7" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="388d7a4c76408cb79df434f159a6baffe7cdcae9ca11693f9524ad62030c26c9" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="95198807b73907c035d3434d141dc4d4011a19c76802a5db6f90a204357ecd1e" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.11.0" rel="150200.152.48.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
</package>
<package pkgid="15b748ba6b3de43bd9c6764f26628aaa7b9c4df2508848d0120fa45a2be3929d" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="c5a553cad896c9e48a5bf178f96b59861b2aad4305a490734c034271751a8676" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="6cf6bf43f04094de1278ceef7788d7e8c49e318244aab2384142fcdcfd087759" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="c6be12e5d304f09cf10dc16896530a5893400ceed8d11385367cdf4f4e410400" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.12.0" rel="150200.152.53.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="2b6524a4a50574620b553bf5820ca87f4785d836a923be77df518603d0dee863" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="01529c70073933ab22a14853fc19ee092f2f443262aad847990e1e03816134bf" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="0a0f59855ffc0e5be6525cc82e34ffd4e58d10553a0ee081812aae4d4fb40c3a" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="51f29270ca1b63c409eb5ca1841baaad3cdaca9c2fcb9831a6371a909f35a4b8" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.13.0" rel="150200.152.56.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
</package>
<package pkgid="85a11133a31f885d3557cf2fed57843e24e1945b16cf6fe0ee984342919d87b9" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="a291b9f3444c7593bce50f0cf93010401254556c44b280c0a0c47c0729c92936" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="dc554e664b5041204ae7f0ec77c2763803b6b3b99c6085ed71ee2a1f1273a05e" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="c00f995d44cd158640c12157670c1afe1b22414062991897c5a6e24ab928df8a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="873a0b008fb6ad0ecefdea04e979b91946e90f3610e1dfb2a47cd10979d05559" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="c9eef35f241a7d601eaec316553a4167f8ae248a8550d1c3bfb146e46a865454" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="53f85ec15620281a17a6577182493c2b59a4813e7a88469beb171db99cc03b64" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="f56e1b6d90e374f777ed46b7704a13bcfcdb403bf12bedc65c59c2468586d68f" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="7122bf01abf8e89a91489f6f5d3de6ba5f2284978396a4b26062ae820f261c56" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="cb6d665e1dd897afff129413c4321015d5172b4fbe19192631f4ee9b5379f543" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="54ec5651d4588917a94ee2976ab5ff46944089916290cf927a5e9dce69f4d512" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="d80ae2c748c7c4ee8064709118823f83230efb3fcd30f4e2f62001af6c0c7abb" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="4ea91d8bd77b563394ad76100a456f333acf41ac08a119cbc9d8b60295457f9d" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="b19cebfb465279fc8b7108818549c15a72670f00345319cf4e8a1266af645cd5" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="e32e1fffd519890922b70672895af33512ac67f6e38b080c8c827cf4bcea7b38" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="ff0664edf55bf5d61dd749049b960ebb142ec6baeeb80fd53e2e6737231521e5" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="1dbefe0a7b571ef9a3287267100be44323792c79ca3bf2fd9c5f9beb16cafc97" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="002bcbea5ca397d21c6b9cd29bf53acd62ddd292e971270400e3d2b22f9e5236" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="9ff156253f41c1d0d58b4230e75dbded60c55b358ff5847d7d88ae4a65667c3c" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="a0bd796edc08915571353467f1d924845406c146638d5df92c867f83fdcf2817" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="207d8bb52df305fd7f2acc75336bb656fc46feb7ea6b961045c0745837780871" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="5ed6cb24cb2a8d211aeaa4a2318fc17cad03c290595d37744412670afa0815ec" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="c1da79d4abc3fcdd8fe06ff8548d685632132c2657c00a5d40f5659ba47c5962" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="d36594930ef4bab9bcbd2c4d0152d66c070bd3d79a9203a4e9346b173f8730bb" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="f8f4a763339a75cad40d49611dc3dcbd93538aea69d1a650ec65deeed8719dd8" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="83a4e78e6416535fceba9a8ebab03d9a6bd79a0ea23c60c3244924132549b015" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="d7c5036388643f0c2a963f744e696d274a82cb1dee9323d2151b4945c21de48a" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="35053c3cf78f301694297a2169e17e245c6bdbb1af9442b262613e75b692b021" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="32c70301355b5768be00511992b7a43aed414ce70d8bcc828dfe21f1ee3f905b" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="9ec6f75e62489007fa1287668663255dc2c2009e89699b7c9e8f48d46b45fb14" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="1a16e60003450d17b092af578a2a49fb0fcd6ab4defc546c9715f97ad033f09f" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="91d418d3b5464a116c6f802def49ec2e5c35fa5bef50d9683ddfa512a1b7101d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="76963d2580f129927167a4a537e47f964506fd11e2260a884f7f012b22594f85" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="5d4f60d712d1ecbd75ea62b3cb7a22b7211446ca81d53ed2c5687b98928e359e" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="3ce5338dceed369f6deb128679681dc831aa3380b16e813e4c55da45fc13aca8" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="4cc8ab5637e82aad8f898bcea9c64cbd687c680b459671274a02c5127a7a07ad" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="cc403971902d646e1b21a9729db614e461244599034e6cf594c76f08f1a286c3" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="6e3a8ccfefe0088c7502a4e9c27ec948db4ad66ec3e3442bf201122c3c90bf29" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="6fa516ff8b8587deac3a1774737c42d5dff396ba2b0bee52fba82b9bff13e234" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="19518aa5549870f1b3721e461805593fe60cc19408239bef374775787a5639d9" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="36fce389ec3bc0467172d41e74a92ca63f733f5c9c77d8ee6429e46fb51ef67a" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="8ec9eb06bfa36d5642dc69fce9634d6051b09b8f7da2794fb59aefb7ca6689cd" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="636ce3c60c5d8a9f63daee64c637b9ee83ba5e8142c5d7ead4698d96624c30de" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="c1a02935c6b23d217ca112c4ddd3757cd685a37888da7e7cdbf73eeab502952a" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="15f0d605bcb7723a344fe144787f58f55096b266fa5b04ce4cd15be275dc4121" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="f939bb349923fcef51f36c9dfa0e854e7347fd6892ac79a86107b943edecc0da" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="47fcbd81f404ed34b7dcd34b7efe2518ae88f17ff08bfbb3b49960b1635a1208" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="ce64565d79961c0f23f2d830c87734dbabb2cf06d71756fc906ffd828e6b292b" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="46647e5aea60c669e9f0e648695e841b6a4085db90141c167c3a8957af2496cb" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="1db4367e640b78a191cd01f491a8566162b33626bb5229518ff6042dfa82aeda" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="a0dfa7a4e25e7d605835e0aa9349fd8fe219a884f44dcdc0293d96358dc56010" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="741b6a9852d8159aa51b7c8b1914298819f959fe80a43b60922a1be24189bc9d" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="8a16b816f614d1ecec8745fc32b3bbe16c1356655b6574af4ca2494041e297f6" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="0535e53a92a6250994de95b6a51976a346c4d2d702c21839fd49b904093c80e4" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="18d111392f349a2feaea99ea492d75a2ee131a1754274ebb4deead00bd657bea" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="f57415cafd3671bdea59a2eb85a501938ef2c1d35067adfb641d1bc407e4302a" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="8c5e0204b0a53f08537400fc994f629afdcb8b53518625386d12678da19349d5" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="f434d65e8a3fb98633630e54322dad08c3d6876660099e0cd77baf477482c1b4" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="2a9d9277602e6e1ecaf54571436572f04f8310fbb490000ed0b99bb441483e09" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="c07f1648fbefc0ad454db5a4d2fdc4a8a8aac50a20b19b58f1bdbf6a7dcba1e2" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="01823a61a14aa9ef93f817cd27bef44cb190395c58309798ef3c38d3b67e8552" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="6f950bce2c60e8098cf08da4c9c2c07cdd86a27e39291a46003adb93e18ac765" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="12982c89456763632b5d700b63bddefe3b22180fb476ab4201fa7f9ca4316e2b" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="5f7f346dfdf0afd6f1383fb4c0ef0c63109858167fd059d0abf227c08503a877" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="2f1656860381a32aef8f7b87c35327604e8df97adefca4ac1c72cca299d05c13" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="192fd67e0560a815e6f387c41ea62b79566ffeee59f64a2001379d20604a1247" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="6380dd50f16985fdb1a5d7057f3f9c8829169ddae0be2d917a9cbc75c2c7dc36" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="de9f0e13eb7ad33a64880789cbbdd36fbeb972e3f050aa04470204d0c45b94a8" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="b65f5829365f6947fdfe88537e4e66c90edb7b42b6a5f9687cd37047c241b62a" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="045a41ed99c183f9dffd746080a77298e14f925c854aeaeb094825c59bdfbe9f" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="9f3de5ed7a14642859577c848a09e98f5a2956f812656362ffa0ccc12e413106" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="1214ef67725665e5b2d182f017f55613dc0e94bbb8644b3a8868e2b2dc97e307" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="09748d29c51b894846f1920a53e7e732ba62c5b50d59468c7fc0d92a8cc173a1" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="1a19dc5dd476d80cf2bcc8e4a6798f557bb3f10f6222557d7970ffa7a179d484" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="af5c04b32810f6795a4cc7681c185898ab9858c1083101e1fae0998304529b29" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="98cc6a7edbec508e6c3d70808ad82a3d9a84aa0df971e1fa8e113a0849e23fff" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="fe69c71fe7d45387ef26789ab9b6a3667be544eb5c3fc0ead0331aa0de58ad57" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="a98f9a60c88f35f284578236846633d4c271db881b8c3e73fad64486469efeed" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="abe6da601c2331321e0791536bd90e774bc7e10f9a6b8536c2fb1ad374475a3d" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="7f77b9ce437770623f8496dfa9ef45b7c04ed1ab1b3f9a42154fee6993af03cf" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="4b048961ec4210055a279b7b18994f7004a5070979e2bb738156b791af6fcad2" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="07b3fab31ebfeef99dfebeff3348b080f9e33d9b7972b5b4d2da79a6cc270c23" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="71c3fce54ce44be40ccab32cd898306247ba261860ce2c1693795638a2308cd6" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="de38fc0113c850087f265903047c3295710ae92f61c538aa820e0d278fc808b1" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="c8fd4c2bd4dabc403879693e3c9542ed8afe258ba822a9accea5a9164ee62e63" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="2063dc9467d0376e27cd2751ccfad7d6f14b31a6161691195004930ff8730d31" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="6a25f8da9bc2f44987101ef8aaac5042541e2b8ee15509fde5e42590629c6b5d" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="0aa06057b6e3156fa2d2c422f3c8758d083f87c103b9c1e3f153c07edd3286f3" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="697ad876855f229fdaef6e079ecd0489de46aa59eb5bff824be1b6bed0e87c6c" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="5984077f427c11b75d4bc07cffa0f76b9ef1115dd9aa08f3af2eac6d146300c2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="12df5fafa50d1d008456bc98ad366a2151ac7b6c6cef2fbfc6d285c699ea1791" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="b6b765e7bd56d963fefd11a5f989bbfa693b53794d694f3ac47f7a1d395550b8" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="c546c316a383e40c23a64cb3ba1b15a9d4923a98e66680347eb13cdf73af9efa" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="234af5a9208cb1fad0ea1ef87e559cc7ae192a274cab8177eff52da34cdee74e" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="a1a34dd89234017ef87e0555bf0f993c6ff1d61361b4639f4b0581c7f41886c1" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="b33a2dd5cc07463cae18a64b188be209a8b6abe2d6196e76859b7a8dcb7f0420" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="a67150da2f2e7d9238c3278f20d206e5c0d3eef06e2b87e100ee20d47b78c7ea" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="5a7e8258b6260f0df1a7dc2ace1890c726625bf1f3d285f46791352bdf054ef2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="21acb807f04a82070c3a8683b6941c62aa90ccd35241247822c11219018c3088" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="004efe56ad6bb1c7ea17f2d85d9c74ce995ad54e7526f18d4957b88e5ca210a9" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="79127f486dc9da2722abaf266125f41d62fa5d6f7a7761876b24ded06db35f09" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="4253b57fbb2eed591c5eec5defa16fe66d3d288be3a3890963082b2a1e924188" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="c28e12d53e8610edf76dd1b0d6b26d830d28d98a08a815d36dbd2c7a38676c18" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="c5cfc08027df5506da820ec7071ad6e9451cfbb22f62e01c07fd60760c13cfad" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="b780ab4c1e19f17ce22daf8fa37e840f22f4a686b06c67b271444ade4c006940" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="a1931f7fefcd6b0133ed5072c001095366bcf4f119234debc038e6ea43d90420" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="102.2.2" rel="150200.8.82.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
</package>
<package pkgid="b33e0bb3eee0f9c1da317533096abef25d8aabac463db025d32910b31f57c4b9" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="bdcf0222955e33d88ca5dec077eb1d6d8c367fb76de01c9dc4528ff1a3cf4579" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="f3dd9759542532daf0d6b988f644bdbf4afdba4f2729be14e96de35fd9682a2c" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="0e7101c81948bf964c0f2c83c385ddd1ef8012e173031f72ca9db65d9c83fff5" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="102.4.0" rel="150200.8.85.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  Placeholder changelog-entry (bsc#1204421)
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
</package>
<package pkgid="08ceebd5f80cb6500d01f4447f7601b20cda452307fd0665951e94c4c66080e1" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="ce0f8ab59cd2937a736040aa2d561ffc25ca4046d6ff79400fb2cbc5d9f36b62" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="b849baae6b3696a6c6d5879aeaa483cd23de41dc2d110ea833f225d6d1bddcda" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="5bf7a07d404d8d68059cf995401bab073e6b1ab9ed327951c67deec75c2c54eb" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="102.5.0" rel="150200.8.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
</package>
<package pkgid="0a96f036759d980a408cfbf5b573aaeecc374ca82c994715bea960c89b65109b" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="2cc37e64eced95f4da839b23695ad086088b1e6b6e8e2973818e9a7370a217f0" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="0495168ab3d7ece9eb9a72687e1e195eee02b159cc3f97234d3df6e63e1c34f5" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="4d203f6d140e079ae9a31866659e89eb4c16c4d37254cf52d88f42802fdc5255" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="102.5.1" rel="150200.8.93.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
</package>
<package pkgid="c1882a2e2e69f779ebc1ebe9cf91abc117697f3207e33c819dbaf7d0c7cd11de" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="ac61b2a3090da1e68daa4692d8ef4af4efafe7f2be787badeb0c529e24c35d7f" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="8f631a8a8e556ef79cdec720d56f84a39616182e4088d6c524230b6b646b5beb" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="4a9a671be3a6e90094de216721d0052b60581e9defca737384be90692aa0d030" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="102.6.0" rel="150200.8.96.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
</package>
<package pkgid="9609b31217b905c77a3d10bd746aa440c82411fe56eade0223275d642b5202e1" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="2b4d599b97d74245d63a20a3eb4c2b95c7ec2b66bc54cbc5167c70828a2109d6" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="f4fafb9242b523c28fab80debdb9765c072df99e37832ef2ae2437597d52555b" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="b4f14d20d42541ec59b2e6a6b0d7244d07ccd7c14f722afd6fcd5c1579929149" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="102.6.1" rel="150200.8.99.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
</package>
<package pkgid="d06ff813e0e034ab04d5181986437a944d33a272eb72124cdefd958b46eaa71d" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="3ec19a72fd7a2e5a5e2efff04ca98e506919740c492ac599c49d58755304eaae" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="8241bef3222998a27f3ebcb0e5137a30e1fd860462e8c2863379f0155e20611c" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="c196d9d98fae3d482e56856635e0a6d1c0f90b9728e1cb94b37680070e3eaee8" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.8.73.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
</package>
<package pkgid="b42c29e77ca6a4931c9fb902ead5837e4b74f397e01e3a278ceca9e45c27c5b5" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="62dfb3b0cd00cf222e4218c07b768d57c6ca03db1f36617db8cac47db0283a59" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="e59a7fdbcfffd793c2739271a72af098b9ecc8cbdfec29b4a9df7dacacfaa9fc" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="9566330ed8be1b160e56f5ff3a66b6a554b42d40b88e95d6aa3b40fed8fcef59" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="91.11.0" rel="150200.8.76.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
</package>
<package pkgid="947957714cc18e53b843e4470f7d25d6201de73654fa2a07df9e82bf880eb750" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="c2ce9a5cd2875fd46ff3847875e85de495cc9a80ca9a6e8b8b06973d428a0ac4" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="13e4732151dd05a798b3a6578ebc4ac03e03410fb95555f02a7e73a99bf5802b" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="12989326943abcc476eac0441d818d3dd46fa6784593b05620cdebcca1d6bdf0" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="91.12.0" rel="150200.8.79.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653307200">- Mozilla Thunderbird 91.9.1
  * fixed: Various security fixes
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1654084800">- Mozilla Thunderbird 91.10
  * fixed: Various UX and theme improvements
  * fixed: Various security fixes
  MFSA 2022-22 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-1834 (bmo#1767816)
    Braille space character caused incorrect sender email to be
    shown for a digitally signed email
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Thunderbird 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1656504000">- Mozilla Thunderbird 91.11
  * fixed: CLIENTID fix for bmo#1759197 in Thunderbird 91.8.1 did
    not work; additional fix applied
  * fixed: "Save-As" attachment dialog did not have filename pre-
    populated
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
</package>
<package pkgid="d99502b15e4e9afeec3835f15629716b9aa7488cab39c165b883950c385f9f1f" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="1b609ff558fd1027e34310e0484f7304775df8765a1855aa06a7dee252548d9c" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="c541ec95f7de8b5802fd591183649cb89069c0d79eb70a49c34fad6f6c2aee7d" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="5467b6f85214086ba9867aebb90175b4b4aa4cd6e7646fdf7f1389adaef3f9d5" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="b5e319491f6e270dfe0ef7905c4a5c697e3ccc01d689351c3c3a89e72995fb7b" name="OpenIPMI" arch="aarch64">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="92bd3eeb32785da8ccfeb88dc50c063e4c52c04ed11c33fdca059f910e8a27c7" name="OpenIPMI" arch="ppc64le">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="f252d181ba5f364e4b69af22601e3b70f48b344bd115c93f4a8163e1048d399e" name="OpenIPMI" arch="s390x">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="8ea6b09c960925764e04770bf116160880ac11120f44e5e4613f114b324062b5" name="OpenIPMI" arch="src">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="3fb5900127e2409d97071d9a75d663204c651c3f3ed31e28263bcdb1a6aae824" name="OpenIPMI" arch="x86_64">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="0a6f777ff64f64e708a3e1c62dcef2402409527024842f9aeee80161447b5d88" name="OpenIPMI-devel" arch="aarch64">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="f87bbad54641194a6ae3e57798c0a7cd4966c175852d3e3b299b6328d200be94" name="OpenIPMI-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="70d9452c0e4ed63e41da976de088c6c513253e91e41abbef3a8028b94f68aec0" name="OpenIPMI-devel" arch="s390x">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="6ec9f190026f0cb1c5c6de256717c5ab9e27f9a900fc38fc5cf5d4acebcbe292" name="OpenIPMI-devel" arch="x86_64">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="de83166a1efa1bc2c7ccb26e445ef0bfef97b85d83362c2ce6d27686e8faaab6" name="OpenIPMI-python3" arch="aarch64">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="bae21d5e32c138778e03090e7d108350c551d8c8c56ca560e0acb993c3e0fe77" name="OpenIPMI-python3" arch="ppc64le">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="91109ffd8f33786c3b4dbda2b1b38e2accada0dd799d67745c45c1dc1dcab909" name="OpenIPMI-python3" arch="s390x">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="0da69a3e6d59d51f1f1daa6e1e51ed5fb136b83becbf7be3dbc1f050770f650f" name="OpenIPMI-python3" arch="x86_64">
  <version epoch="0" ver="2.0.31" rel="150400.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423310400">- Do not try to register/deregister OpenIPMI.info.gz in post/postun
  of the devel package: we do not install such a file.</changelog>
  <changelog author="trenn@suse.de" date="1456488000">- Update to latest git commit:
  a01bbe94efff3a5f239b3b5440c8..052d36ec88515c1b1177faa442833e3
  Add: OpenIPMI_2.0.21_to_HEAD.patch
  Removed modifications for:
  - lanserv/ipmi_sim_chassiscontrol
  - lanserv/marvell-bmc/TODO
  due to git repo inconsistencies
- Some spec file cleanups obs complained about
  - &gt; also spec-cleaner run through</changelog>
  <changelog author="trenn@suse.de" date="1457352000">- Fix perl requires by using the pre-defined macro (bsc#969576)</changelog>
  <changelog author="dimstar@opensuse.org" date="1457438400">- Remove one occurence of perl_requires: once is sufficient.</changelog>
  <changelog author="fgerling@suse.com" date="1473854400">- Update spec file to properly install sysconfig.ipmi (bsc#989985, bsc#988443)</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Version update to lates trelease 2.0.23:
  * There is no longer actively updated changelog
  * Various bugfixes since last git pull from 2016-02-26
- Drop OpenIPMI-libtool.patch which was merged upstream
- Drop OpenIPMI_2.0.21_to_HEAD.patch patch as it is no longer
  needed
- Add patch openipmi-tinfo.patch to detect tinfo properly
- Add patch to fix OpenIPMIpthread pc file (from Fedora)
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Add patch to not bundle libedit (from Fedora)
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506340800">- Upgrade to 2.0.24
  * Mainly code cleanup and small rewrites.
  * Variable renaming IPMI_... to OPENIPMI_...
  * Improved internal error handling
  * IPv6 support added/completed.
  [fate#322830, OpenIMPI-add-libncurses.patch,
  OpenIPMI-no-return-in-nonvoid-function.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1516363200">- * added a section defining IPMI_SI_MODULE_NAME to sysconfig.ipmi
  * added code to OpenIPMI.spec/%install to modify sysconfig.ipmi
    according to architecture
  * modified openipmi-helper to load "sysconfig.ipmi" AFTER setting
    default IPMI_SI_MODULE_NAME=ipmi_si
  [bsc#1059820, OpenIPMI.spec, openipmi-helper, sysconfig.ipmi]</changelog>
  <changelog author="dimstar@opensuse.org" date="1532520000">- Replace usage of deprecated py_sitedir macro with
  python_sitearch.</changelog>
  <changelog author="trenn@suse.de" date="1536321600">- Update to latest version 2.0.25 plus latest fixes (fate#326195):
- A    OpenIPMI-2.0.25..HEAD_git.diff
  Patch to latest git commit:
  commit 4ac55d7dc7016c9e5f0c474f69f4e64e7aacac42
  Date:   Wed Jul 18 13:59:29 2018 -0500
    unix: Add a way to clear fd handlers with no callbacks
  I had to manually edit git diff v2.0.25.. and remove .gitignore deletion
  to patch succesfully. Build service wants to have the original
  .tar.gz tarball from sourceforge.
  I also had to add the bootstrap file which seem to exist in git sources
  but not in the exported tarball, even it is not listed in .gitignore:
  A bootstrap
  OAD
  0001-Apply-OpenIPMI-2.0.18-pthread-pkgconfig.patch.patch
- Adjusted patches:
  M    0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch
  M    fix-conversions.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    openipmi-tinfo.patch
- Fix build service error (use /usr/bin/python3 in shebang instead of env
  A    use_python3_shebang
- Build documentation (IPMI.pdf) ourselves as IPMI.pdf vanished from sources
  For this quite some build requires had to be added as well
  A    fix_dia_version_detection.patch</changelog>
  <changelog author="jengelh@inai.de" date="1536667200">- Use noun phrase in summary. Ensure neutrality of description.
- Update unspecific summaries of subpackages.
- Drop --with-pic which is only relevant for static libs.
- Speedier /usr/bin/find call.</changelog>
  <changelog author="jengelh@inai.de" date="1552824000">- Use noun phrase in summary. Remove em dashes from summaries.
- Implement shared library packaging policy.</changelog>
  <changelog author="josef.moellers@suse.com" date="1579521600">- Update to latest version 2.0.28
  * Fixed a number of potential buffer overruns by appending a NUL
    character to strncpy'd strings.
  * switched from editline to readline
  * some variable and function renaming to avoid leading
    underscores
  * more changes, no documentation available (ChangeLog file
    is unchanged!)
  * Two patches now obsolete.
  [OpenIPMI-2.0.25..HEAD_git.diff,
  0003-Apply-OpenIPMI-2.0.21-nobundle.patch.patch,
  OpenIPMI-2.0.28.tar.gz]</changelog>
  <changelog author="dmueller@suse.com" date="1597665600">- update to 2.0.29:
  * Add an external definition for ipmi_malloc_shutdown()
  * Pass 0 to snprintf size when calculating real size
  * selector: Fix a signed/unsigned comparison
  * selector: Fix handling if pselect() returns 0
  * selector: Return the right value for timer already in use
  * selector: Cause the read handler to be called on an exception
  * selector: Fix multi-threading issues
  * selector: Add an selector call to install a sigmask
  * For for brokenness with fork() and epoll()
  * Fix a deadlock when freeing a running timer
  * lanserv: Allow individual group extensions to be registered
  * Include readline history headers where needed</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1615204800">- drop -fPIC from CFLAGS which breaks our gcc-PIE profile resulting in
  non-position independent binaries and thus weakened security (bsc#1183046).</changelog>
  <changelog author="mcepl@suse.com" date="1624881600">- Use Python3 instead of Python2 (bsc#1190999).</changelog>
  <changelog author="trenn@suse.de" date="1625832000">- Update to version 2.0.31
  Adopted patches to latest sources:
  M    OpenIMPI-add-libncurses.patch
  M    OpenIPMI-no-return-in-nonvoid-function.patch
  M    OpenIPMI-prefer_perl_vendor.patch
  M    fix_dia_version_detection.patch
  M    openipmi-tinfo.patch
  * sample: Prefer glib for solterm instead of posix
  * sample: Remove -rdynamic from openipmicmd
  * smample: Compile ipmicmd with glib if it is available
  * glib: Allow NULL timeout to perform_one_op()
  * lanserv: Fix an issue with rmcp sending
  * Rework mcserv.h so that marvell-mod can get what it needs
  * lanserv: Move sol_init_mc() into sol code
  * lanserv: Remove all calls from the library to user code
  * Move ipmi_log() to ipmi_log.h
  * ui: export ipmi_ui_cb_handlers
  * ui: Add link libraries to UI library
  * Add -no-undefined to all shared library links
  * Rework ipmi_cmdlang_report_event()
  * Rework ipmi_cmdlang_global_err()
  * Get rid of posix_vlog()
  * lanserv: Use recv, not read, for a network socket
  * A lot windows (DLL, winsock, etc.) enhancements
- Update to version 2.0.30:
  * Switch to python3 by default
  * lanserv: Fix some various bugs
  * sol: Fix some various bugs
  * sdrcomp: Fix some memory leaks
  * sol: Fix some packet handling errors
  * solterm: Clean things up at shutdown
  * Fix a leak in the selector code
  * sol: Rewrite the library code
  * sol: Return errors from close if the send fails
  * Reconfigure the transmitter on a reconnect
  * Refuse writes greater than 255 bytes
  * lan: Fix timer cleanup
  * Fix init/shutdown issues with mcs and domains
  * Fix shutdown on error issues
  * Fix a memory leak at initialization
  * selector: Make the timer stop with done work right when handler running
  * Add parameters to let the lan timeouts be specified
  * initscript: Don't delete ipmi devices if udev created them
  * selector: Rework to allow an arbitrary number of fds with epoll
  * Don't disable fd handlers before setting one up
  * Don't crash if passed in fd is &gt;= FD_SETSIZE</changelog>
  <changelog author="trenn@suse.de" date="1632830400">- Add latest mainline fixes:
  A    lanserv-Add-the-judgment-on-the-validity-of-length-in-emu_cmd.c-and-session-in-lanserv_ipmi.c.patch
  A    unix_thread-Remove-the-fd-handler-sets-before-it-s-set-up.patch</changelog>
  <changelog author="trenn@suse.de" date="1633521600">- Enhance changelog as demanded in an internal submitrequest</changelog>
</package>
<package pkgid="185bf3377b7592827fc163ae925dd6a12cf2e36507031aad4b5d498f7c1debb9" name="PackageKit" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="96a1e516f7fab9cee10acf3e9b4aeb1fc7ed4805d7c02ffd36d672d16b7df5f8" name="PackageKit" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="08db64997fb4d2451202f024990ac44d84751ad7b4d8bd59848ee9540d405c05" name="PackageKit" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="8ec25f1a1caf89e9b96fd801a908ae064157fdc316634330715d9def692a929e" name="PackageKit" arch="src">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="29f1b1b3840f517a2af5688f9b69abda41090b806f5e511380765037296a6560" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="fe5df848cd133d9fe57be01b376b6875543970ce9e8072190db3c7c47efbd35e" name="PackageKit" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="108b54d6cfa2e8e2b21b13effec140cee024a0bb6c949067496d3da3a9df4d87" name="PackageKit" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="326d55d8ce3bfb598a2aca5f57eae652f42091a87de69a044294cef621ffde21" name="PackageKit" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="68c9724f44f81a840539a51c18306541d5611892985cc71b522b1642ac2a6bdd" name="PackageKit" arch="src">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="3bd89e75d478e3a347e4f47cdd5ee3d0bc5c70c23b9e30b2344c94474da3d2e7" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="066ec406cc49efcf96bc93152fa09353c5d1ce7c8b4eacf13010a81c73b6ee8c" name="PackageKit-backend-dnf" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="8546d178a070e4b20e15103d48ea907c97284169d2ccc33f2db77e37a36f9d06" name="PackageKit-backend-dnf" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="a73f8391555ae3485532f0182d6ac74751e93843eec6187639451657956c3e5b" name="PackageKit-backend-dnf" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="52afcf5639d73bbb0bcd1eeef51261fd5449f121067c4c26b62029c6df247ae4" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="4a1111a9c2b23cfbba2bc8d038f6c7a1f7c9742b3e51d8c639d0cf265e9a8d8f" name="PackageKit-backend-dnf" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="15c526051bd8b1819a880b40a52246fce71abfa4c3c6448992244e6d79780493" name="PackageKit-backend-dnf" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="c47595c9c784eb84722def77d926b567ced3c3e623fac5560ebd95b5a15b8de1" name="PackageKit-backend-dnf" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="f44a6bb17a4462a0130ee4f05c198e2413b1074d4f67c3b9565e7c044649fa5b" name="PackageKit-backend-dnf" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="a7276b4e0767ce9a51699252412685e60c3b965f55df7a8528587420634de1b6" name="PackageKit-backend-zypp" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="3a026214cd69775c140f44f2f98f1a80d0fcfcd37f2543976efe93bece7fc6e4" name="PackageKit-backend-zypp" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="8fbed5f634b76f3d71a3a436c13e4f8f5201143e8e90877035ab45e6b5ed772a" name="PackageKit-backend-zypp" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="205559405265a563aeb449fcf2aa64876dde811370b795702029fd0b137a083d" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="b27415ce324adea9c2d5751b684ffee16edd42e21cae346fc5ac38a446557d48" name="PackageKit-backend-zypp" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="79f1b17f9bc501fd36a3181774406df7c92c60541662d0e220c9ba6bfe3d59de" name="PackageKit-backend-zypp" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="1826a25c7d018687acf73011cc2f3b2d5f4c2f346507437968bf2e0de045026d" name="PackageKit-backend-zypp" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="35353ff89334a8cd66eb8a39822e5bcca3fb5734d97e1e39e8e9aad92d51c9d1" name="PackageKit-backend-zypp" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="e1e48e1176b0eeda3e994f1d4d2037c52b4860b4d12872366817a2fc97e142c1" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="5b58e4d4a9475eca621da4b4480accdaedee86256901d44f1f2e364083904c28" name="PackageKit-branding-upstream" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="0cc9f3dea9fdb717596370958a31e2aa855fb9c229a90ebad1d3f8fae929fc7c" name="PackageKit-devel" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="16935137fe2bdbfe143539a409bff8816c15e2fd9e199100664935576cdc11f3" name="PackageKit-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="8a4f2de5dc063dfc34e25f551818c8b0fc3057343bad7a6984f4b2a0556f65c2" name="PackageKit-devel" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="9d0ef8475fc249454f62bdd85270e8c7ec80301af1fa89dfa8b556ea946bf86b" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="b4313790a48cefe5a5c0b49cd91d9de03883c7b3dab4c6b2566facda65435842" name="PackageKit-devel" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="61355fb9f2851e92c06259e97a7ed0d969145298786db3fd96fc6085695155c0" name="PackageKit-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="53770ca177cb183ad098ef325e970563703cd8723dc47f56bb6cc257570128ef" name="PackageKit-devel" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="94a014f4d197c963850c4cd24c2879bacd31463f76f60ab19c2ee81f8865427e" name="PackageKit-devel" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="65e54245218f36a9a1e2f079ad7d013fa90dfa4e6d68978bf40de30fe8704605" name="PackageKit-gstreamer-plugin" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="627ec335e399a389c6e3f97604826b064ce63e2b3975818576315b4b5fe56c34" name="PackageKit-gstreamer-plugin" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="844de2dbb61b7789cede49c29effafda0789de38c1b7f4a683d37d6f065c1eb6" name="PackageKit-gstreamer-plugin" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="32d8a657d0e59eb8112fd2490ef673261f875d0b30ac70331d92d8ae7f627218" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="fecd4a4b5f2837383f70ca0c0def04670a540c86e063c626a4e427c7d17207cf" name="PackageKit-gstreamer-plugin" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="0bbaf025f792657ab15267bd981d4683c01d7e70c522aed5ab4cbb89706738f4" name="PackageKit-gstreamer-plugin" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="7346dfb87a5b7dba80eed59ed7fe500067e91afc88026b01e353aa6008cf5929" name="PackageKit-gstreamer-plugin" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="c99ffcd9abdf9944293ad2b98fbf8191a937f89998b1d9787eab99a03392708f" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="ed16ed49f645c90b70741b5e500af7627346c674382ef3e0b0fb7f55c1abcd7a" name="PackageKit-gtk3-module" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="93bd51f18454e2fe73fedcd638b20bde1c47a97a2e2c0e5d4ff402fcf05aa6f7" name="PackageKit-gtk3-module" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="a29e877ebe485966120190091ef558132ab6d2700255abc336c94ffecd15e7c8" name="PackageKit-gtk3-module" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="55f0583cb7f20bbd4f1963b67635592b2f8c901ff9052884f49a620a0abf9b0f" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="51248dc517e831d6a8ac3093dea85b5ce028659d30e7a766339b563e8075b457" name="PackageKit-gtk3-module" arch="aarch64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="221410c12ba208561f3eaa42eac34dd09176ee2860a3e0bac0afc308669d59ff" name="PackageKit-gtk3-module" arch="ppc64le">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="a3445e1142f3d180782dd0a290fad4cf0ce997b8f9794a3413c354f893ddcc17" name="PackageKit-gtk3-module" arch="s390x">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="1911b7967508dfa098cb815c0928a71a07615b6206ef743eb4841fa258452d2c" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="16e0ee87342f482485239484810ec66bc3ca74d82b620db52e495b4f97df8b81" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="150400.3.3.1"/>
  <changelog author="songchuan.kang@suse.com" date="1606910400">- Add PackageKit-zypp-cleanup-tmp-files.patch: Revert "Revert
  "zypp: Clean up temporary files when PK quits""
  (bsc#1169739 gh#hughsie/PackageKit/commit#cf73b01a).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1607083200">- Add PackageKit-CVE-2020-16121.patch: Information disclosure in
  InstallFiles, GetFilesLocal and GetDetailsLocal
  (gh#hughsie/PackageKit/commit/d5e8c597, bsc#1176930).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1609243200">- Add PackageKit-fix-crash-pre-dbus.patch: Do not crash when
  calling pk_dbus_get_uid() before D-Bus is setup.</changelog>
  <changelog author="stasiek@michalski.cc" date="1611057600">- Build command-not-found by default</changelog>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
</package>
<package pkgid="c361834f4cdc20f5e48b94d9a5bcad109b3f3fbcaeb82d100a195229a6d5a975" name="PackageKit-lang" arch="noarch">
  <version epoch="0" ver="1.2.4" rel="150400.3.6.1"/>
  <changelog author="songchuan.kang@suse.com" date="1611748800">- Add PackageKit-zypp-reset-update-mode-after-get-updates.patch:
  zypp: Reset update mode after getting updates
  (gh#hughsie/PackageKit/commit#b208f551, bsc#1180150).</changelog>
  <changelog author="ngompa13@gmail.com" date="1611921600">- Backport fix from upstream to have DNF backend force dup for updates
  + Patch: PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch</changelog>
  <changelog author="dleuenberger@suse.com" date="1612008000">- Do not build cnf: scout-c-n-f is still pending, having PK-cnf
  obsolete cnf is unacceptable.</changelog>
  <changelog author="ngompa13@gmail.com" date="1614340800">- Enable offline updates support for openSUSE Leap 16+
- Recommend a provider of rpm-repos-openSUSE for the DNF backend
- Use dnf-data instead of dnf-conf in Supplements on DNF backend package</changelog>
  <changelog author="songchuan.kang@suse.com" date="1614600000">- Add PackageKit-zypp-initialize-pool.patch: zypp: Make sure pool
  is initialized at the beginning of some methods
  (gh#hughsie/PackageKit/commit#3efa0c524, bsc#1180597).</changelog>
  <changelog author="develop7@develop7.info" date="1615809600">- Add PackageKit-remove-transaction-size-limit.patch: Remove large transaction
  size sanity check (gh#hughsie/PackageKit/commit#ac5c8660)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1616760000">- Add PackageKit-cancel-transaction-if-daemon-disappears.patch:
  Fix hangs in packagekit-glib2 client if daemon crashes
  (gh#hughsie/PackageKit#464).</changelog>
  <changelog author="dfaggioli@suse.com" date="1623326400">- Add PackageKit-dnf-ignore-weak-deps.patch
  Backport upstream patch (gh#Conan-Kudo/PackageKit/commit#ecd4a96,
  gh#Conan-Kudo/PackageKit#488) for fixing: dnf backend not honoring
  "install_weak_deps=False" (gh#dfaggioli/Packagekit#486). See also
  https://bugzilla.redhat.com/show_bug.cgi?id=1955484</changelog>
  <changelog author="yfjiang@suse.com" date="1627560000">- Drop upstream merged patches on SLE and Leap 15.4:
  + PackageKit-CVE-2020-16121.patch</changelog>
  <changelog author="songchuan.kang@suse.com" date="1629460800">- Add PackageKit-zypp-fix-crash-with-empty-search-string.patch:
  zypp: Fix crash when search string is NULL (bsc#1179287,
  gh#hughsie/PackageKit/commit#21ccf49).</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 1.2.4:
  + Libraries:
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Correct 'cancellable' use in pk_client_repair_system_async()
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Improve thread safety on an operation cancellation
  + Backends:
  - dnf:
    . Read update information also when getting list of updates
    . Honor install_weak_deps=False if it is there
    . Use 'hy_query_get_advisory_pkgs', if available
  + New Features:
  - PkDetails: Add 'download-size' property
  - PkPackage: Add update severity property
  + Bugfixes:
  - Let the finish understand the 'cancelled' exit code
  - Make backends that use pk-backend-spawn work (#477)
  - Only set polkit interactive flag if method call has too
- Changes from version 1.2.3:
  + Backends:
  - alpm:
    . Add post transaction hook
    . Rename errno to alpm_err to avoid name clashes
  - aptcc: Auto-remove old kernels, unless configured otherwise
  - dnf: Add support for coercing upgrade to distupgrade
  - zypp:
    . Make sure pool is initialized at the beginning of some
    methods
    . Reset update mode after getting updates
  + Bugfixes:
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon
    disappears
  - Do not crash when calling pk_dbus_get_uid() before D-Bus is
    setup
  - Fix all compiler warnings
  - Fix multilib conflicts in generated pk-enum-types.h
  - Free scheduler array correctly again
  - Remove large transaction size sanity check
- Drop patches fixed upstream:
  + PackageKit-zypp-cleanup-tmp-files.patch
  + PackageKit-zypp-reset-update-mode-after-get-updates.patch
  + PackageKit-dnf-Add-support-for-coercing-upgrade-to-distupgrade.patch
  + PackageKit-zypp-initialize-pool.patch
  + PackageKit-remove-transaction-size-limit.patch
  + PackageKit-cancel-transaction-if-daemon-disappears.patch
  + PackageKit-dnf-ignore-weak-deps.patch
- Add 505.patch: pk-offline: Add flags to D-Bus invoking methods.
  That's currently to be able to set whether the method should be
  interactive or not. The old functions call the methods as
  non-interactive.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1636113601">- Add PackageKit-zypp-c++17.patch: Fix build failure when building
  with libzypp &gt; 17.28.5 and gcc &lt; 11
  (gh#hughsie/PackageKit/commit/1a6bb6ae6, bsc#1192349).</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064000">- Rewrite prep phase to not use autopatch -M: SLE15/Leap15's RPM
  version does not support that syntax yet.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637064001">- Apply all patches unconditonally: PackageKit-zypp-c++17.patch is
  merged in upstream git and thus does not justify to be
  conditionally applied.
- Switching back to autosetup, as this works without conditional
  patches.</changelog>
  <changelog author="songchuan.kang@suse.com" date="1653566400">- Add PackageKit-zypp-locked-packages.patch: zypp: ignore locked
  packages(gh#hughsie/PackageKit#543, boo#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1656676800">- Add PackageKit-zypp-add-upgrade-system.patch: implement
  upgrade-system method(gh#hughsie/PackageKit/commit/930dd201b).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1659528000">- Modified PackageKit.spec: bump libzypp dependency version to
  17.31.0.
- Add PackageKit-zypp-avoid-statuReset.patch: zypp: Avoid
  statuReset() on locked packages
  (gh#PackageKit/PackageKit/commit/dd1964255, bsc#1199895).
- Add PackageKit-zypp-disable-upgrade-system-in-sle.patch: zypp:
  Disable upgrade-system support in SLE
  (gh#PackageKit/PackageKit/commit/0fcd820c2).
- Add PackageKit-zypp-restore-pool-status-after-simulating-update.patch:
  zypp: restore pool status after simulating an update
  (gh#PackageKit/PackageKit/commit/2b61a6649, bsc#1199895).
- Add PackageKit-zypp-fix-is-tumbleweed-check.patch: zypp: build
  the pool before calling is_tumbleweed()
  (gh#PackageKit/PackageKit/commit/146890153).
- Add PackageKit-zypp-update-libzypp-dependency-version.patch:
  zypp: update libzypp dependency version
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1662120000">- Add PackageKit-zypp-dont-refresh-before-searching.patch:
  zypp: Don't refresh repos before searching
  (gh#PackageKit/PackageKit/commit/58c7c0285, bsc#1199895).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1664193600">- Add PackageKit-zypp-dont-remove-locked-packages.patch: zypp:
  Check if packages are locked before removing
  (gh#PackageKit/PackageKit/commit/8649a07bc, bsc#1199895).
- Add PackageKit-zypp-add-repo-in-packageid.patch: zypp: add
  repository data in package id
  (gh#PackageKit/PackageKit/commit/8eb2ef0ae, bsc#1202585).
- Remove PackageKit-zypp-locked-packages.patch: reverted upstream
  (gh#PackageKit/PackageKit/commit/ed3e38043).</changelog>
</package>
<package pkgid="a4dd070c14c4fb3bbd4bfbada111bd5e79e99c106ba8fc3e7579f7348890c4be" name="SAPHanaSR" arch="noarch">
  <version epoch="0" ver="0.160.1" rel="150000.4.20.1"/>
  <changelog author="fabian.herschel@suse.com" date="1464782400">- bsc#982355 - SAPHanaSR: SAP changed the interface of landscapeHostConfiguration.py beginning with SPS12 rev 120
- bsc#981446 - SAPHanaSR: SAP revokes interface hdbnsutil -sr_state beginning from rev 112.03</changelog>
  <changelog author="imanyugin@suse.com" date="1478088000">- Version bump to 0.152.18
- Fix bsc#985474: SAPHanaSR-showAttr shows node ID instead of uname
- Fix bsc#1007825: SAPHanaSR-showAttr fails to show node status
- Fix bsc#1005872: SAPHana Resource Agent handling virtual hostnames
- Fix bsc#1007605: SAPHanaSR no longer ignores DR SR status</changelog>
  <changelog author="ilya.manyugin@suse.com" date="1482235200">- Version bump to 0.152.19
- Fix bsc#1014397: SAPHanaSR not failing over consistently
- Fix bsc#1008469: SAPHanaSR-monitor reports wrong status colors and error messages
- Add a cluster attribute hana_&lt;SID&gt;_version upon a probe of SAPHanaTopology
- Update man pages
- Change the Setup Guide to contain just the URL to the best practices
- Fix bsc#994753: Tool SAPHanaSR-showAttr fails to read offline cib file correctly
- Fix bsc#1016691: Status file of SAPHanaTopology is not multi instance aware (MCOS)
- Fix bsc#1016936: SAPHanaSR-TestDriver fails to detect the correct status
- Fix bsc#985822: HAWK Wizards are listed as legacy</changelog>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
</package>
<package pkgid="87fbc6671e4a98b15b3b3b20d0dfd3fd690c3c6f2a475ac9ebbd545262048fcc" name="SAPHanaSR" arch="src">
  <version epoch="0" ver="0.160.1" rel="150000.4.20.1"/>
  <changelog author="fabian.herschel@suse.com" date="1464782400">- bsc#982355 - SAPHanaSR: SAP changed the interface of landscapeHostConfiguration.py beginning with SPS12 rev 120
- bsc#981446 - SAPHanaSR: SAP revokes interface hdbnsutil -sr_state beginning from rev 112.03</changelog>
  <changelog author="imanyugin@suse.com" date="1478088000">- Version bump to 0.152.18
- Fix bsc#985474: SAPHanaSR-showAttr shows node ID instead of uname
- Fix bsc#1007825: SAPHanaSR-showAttr fails to show node status
- Fix bsc#1005872: SAPHana Resource Agent handling virtual hostnames
- Fix bsc#1007605: SAPHanaSR no longer ignores DR SR status</changelog>
  <changelog author="ilya.manyugin@suse.com" date="1482235200">- Version bump to 0.152.19
- Fix bsc#1014397: SAPHanaSR not failing over consistently
- Fix bsc#1008469: SAPHanaSR-monitor reports wrong status colors and error messages
- Add a cluster attribute hana_&lt;SID&gt;_version upon a probe of SAPHanaTopology
- Update man pages
- Change the Setup Guide to contain just the URL to the best practices
- Fix bsc#994753: Tool SAPHanaSR-showAttr fails to read offline cib file correctly
- Fix bsc#1016691: Status file of SAPHanaTopology is not multi instance aware (MCOS)
- Fix bsc#1016936: SAPHanaSR-TestDriver fails to detect the correct status
- Fix bsc#985822: HAWK Wizards are listed as legacy</changelog>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
</package>
<package pkgid="61610c465234f3f6f35304eb90316969947f70cf1764e3513e04b6ecf7aebe9c" name="SAPHanaSR" arch="noarch">
  <version epoch="0" ver="0.161.1_BF" rel="150000.4.25.1"/>
  <changelog author="ilya.manyugin@suse.com" date="1482235200">- Version bump to 0.152.19
- Fix bsc#1014397: SAPHanaSR not failing over consistently
- Fix bsc#1008469: SAPHanaSR-monitor reports wrong status colors and error messages
- Add a cluster attribute hana_&lt;SID&gt;_version upon a probe of SAPHanaTopology
- Update man pages
- Change the Setup Guide to contain just the URL to the best practices
- Fix bsc#994753: Tool SAPHanaSR-showAttr fails to read offline cib file correctly
- Fix bsc#1016691: Status file of SAPHanaTopology is not multi instance aware (MCOS)
- Fix bsc#1016936: SAPHanaSR-TestDriver fails to detect the correct status
- Fix bsc#985822: HAWK Wizards are listed as legacy</changelog>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
</package>
<package pkgid="abc462354ccc1d23b138138b65a3dd21f532d70095ab5e0bf336fa48c4909b93" name="SAPHanaSR" arch="src">
  <version epoch="0" ver="0.161.1_BF" rel="150000.4.25.1"/>
  <changelog author="ilya.manyugin@suse.com" date="1482235200">- Version bump to 0.152.19
- Fix bsc#1014397: SAPHanaSR not failing over consistently
- Fix bsc#1008469: SAPHanaSR-monitor reports wrong status colors and error messages
- Add a cluster attribute hana_&lt;SID&gt;_version upon a probe of SAPHanaTopology
- Update man pages
- Change the Setup Guide to contain just the URL to the best practices
- Fix bsc#994753: Tool SAPHanaSR-showAttr fails to read offline cib file correctly
- Fix bsc#1016691: Status file of SAPHanaTopology is not multi instance aware (MCOS)
- Fix bsc#1016936: SAPHanaSR-TestDriver fails to detect the correct status
- Fix bsc#985822: HAWK Wizards are listed as legacy</changelog>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
</package>
<package pkgid="945b78d4af7ac42b7952454ac0ad32c115d3a47b95eb5a3116f8a36ce7d51d32" name="SAPHanaSR" arch="noarch">
  <version epoch="0" ver="0.162.0" rel="150000.4.28.1"/>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
</package>
<package pkgid="4459ded9afe183eab5bf2b31d2bc324f3b96de34490d45ad84c5e6415639c282" name="SAPHanaSR" arch="src">
  <version epoch="0" ver="0.162.0" rel="150000.4.28.1"/>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
</package>
<package pkgid="5d25772d3156802580c93679bdb5bf0d5932fb9dcc235d2f58e7bbe74a61417d" name="SAPHanaSR" arch="noarch">
  <version epoch="0" ver="0.162.1" rel="150000.4.31.1"/>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
</package>
<package pkgid="ff232e5cb3b4aa0fcbe108e7c1649aba3b751448fe856811dad91b01ded62088" name="SAPHanaSR" arch="src">
  <version epoch="0" ver="0.162.1" rel="150000.4.31.1"/>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
</package>
<package pkgid="bed2b76988796c9ab1728e6ae9ab977d442e48e69c082f3969f203c919cde0e2" name="SAPHanaSR-ScaleOut" arch="noarch">
  <version epoch="0" ver="0.184.1" rel="150000.33.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name serve died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
</package>
<package pkgid="4e7fd0612884f15c3ac2e3ba82ff4832ac72d89090823c08eafee9de59ae9b94" name="SAPHanaSR-ScaleOut" arch="src">
  <version epoch="0" ver="0.184.1" rel="150000.33.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name serve died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
</package>
<package pkgid="e30c92046d8cbe6b1dfe5f94819431f2798678b8a05ccc01493d59f90b76937a" name="SAPHanaSR-ScaleOut-doc" arch="noarch">
  <version epoch="0" ver="0.184.1" rel="150000.33.1"/>
  <changelog author="imanyugin@suse.com" date="1465819200">- Initial technical preview release. fate#318793</changelog>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
  <changelog author="abriel@suse.com" date="1627905600">- change version to 0.180.1
- Multi-target SAP HANA Scale-out replication support.
  Extent the SAP HANA ressource agents from single replication
  automation to multi replication automation, which means
  adding multi-target support (srHook - SAPHanaSrMultiTarget.py)
  /usr/sbin/SAPHanaSR-manageAttr - Add a helper tool to support the
  customer during the update from a single replication automation
  to multi replication automation.
  (jsc#SLE-17452, jsc#SLE-20081)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop' in
  the cluster. We will use 95% of this action timeouts to calculate
  the new resource start and stop timeout for the 'WaitforStarted'
  and 'WaitforStopped' functions. If the new, calculated timeout
  value is less than '3600', it will be set to '3600', so that we
  do not decrease this timeout by accident in currently running
  clusters
  (bsc#1182545)
- improve handling of return codes in saphana_stopSystem and
  saphana_stop function.
  (bsc#1182115)
- If the cluster is down during a SR change event, these events
  need special care. They need to pick-up separately to not get
  lost.
- integrate man pages back to the base package SAPHanaSR-ScaleOut.
  The doc package SAPHanaSR-ScaleOut-doc will still exists, but
  only contain the file 'SAPHanaSR-Setup-Guide.pdf'
- During a SR takeover there may be a small time frame where the
  srHook gets a state change from the API with an empty site name.
  This results in a mis-configuration of the cluster. So log the
  occurrence of an empty site name, but do not generate bad
  formatted cluster attribute name.
  (analog to ScaleUp - bsc#1173581)
- add SAPHanaSR-call-monitor
- handle 'leftover instances'
  if HANA is configured to have only one master name server, but
  no additional master name server candidates, there may be the
  situation, where the master name serve died and so the landscape
  has no active name server anymore.
  But there are other instances running with active communication
  channels. To prevent data corruption or operations on outdated
  data, we identify and stop these 'leftover' instances.
- manual page updates:
  SAPHanaSR-ScaleOut.7 (bsc#1144442)
  SAPHanaSR-showAttr.8 (bsc#1144312)
  and others</changelog>
  <changelog author="abriel@suse.com" date="1641816000">- change version to 0.181.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189532, bsc#1189533)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)
- add switch 'cib_access' to the SAPHanaSrMultiTarget hook to give
  control over the hook runtime.
  Default is 'all-on' which means there are 3 cib calls performed
  inside the hook script.
  Changing the value of 'cib_access' inside the global.ini file to
  'site-on' to perform the absolute minimum cib calls (only one)
  (bsc#1189540)</changelog>
  <changelog author="abriel@suse.com" date="1669723200">- Version bump to 0.184.1
  * add new HA/DR provider hook susChkSrv supporting a fast-dying
    indexserver
    (jsc#PED-1241, jsc#PED-1240)
  * add new HA/DR provider hook susTkOver for blocking manual
    takeovers
    (jsc#SLE-16347)
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739)
  * fix SAPHanaSR-replay-archive to handle hb_report archives again
    (bsc#1198897)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * add lost-nameserver-slave handling to SAPHanaTopology, to avoid
    toggeling SAPHanaController resource, if all nameserver-masters
    got lost.
    SAPHanaController keeps started, if WAITING4NODES event needs
    to be processed. This only keeps the resource "started".
    The SAP HANA instance will only be started, if enough nodes are
    available to fulfill the needs of the SAP HANA landscape.
  * add new tool SAPHanaSR-manageProvider to show, add and delete
    HA/DR provider sections in the global.ini of SAP HANA.
  * changes to the demote_clone function of the resource agent:
    if the role is '*:shtdown:shtdown:shtdown' (topology agent run
    into timeouts) the function fail with rc=1, to get the managed
    resource stopped
    changes to the stop_clone function of the topology agent:
    call landscapeHostConfiguration.py and set the roles as they
    were reported. If the command timed out, set the role to
    '*:shtdown:shtdown:shtdown' and return 1 to get the node
    fenced.
    The used timeout for the landscapeHostConfiguration.py call can
    be configured by the cluster action timeout, if needed. It will
    be 50% of the action timeout or the minimum of 300s.
    (bsc#1198127)
  * SAPHanaSRTools.pm: shows terminate node attribute too
  * change SAPHanaSR-manageAttr to support the different behaviour
    of 'crmadmin -qD' in different pacemaker versions
    (bsc#1200969)
  * fix HANA_CALL function to support MCOS environments again
    (bsc#1198780)
  * correct the order constraint in man page
    ocf_suse_SAPHanaTopology.7
    (bsc#1197239)</changelog>
</package>
<package pkgid="45a9a83161f2384e709d8f83cba3e3b388937a08b1d9036b894f37280de48aba" name="SAPHanaSR-doc" arch="noarch">
  <version epoch="0" ver="0.160.1" rel="150000.4.20.1"/>
  <changelog author="fabian.herschel@suse.com" date="1464782400">- bsc#982355 - SAPHanaSR: SAP changed the interface of landscapeHostConfiguration.py beginning with SPS12 rev 120
- bsc#981446 - SAPHanaSR: SAP revokes interface hdbnsutil -sr_state beginning from rev 112.03</changelog>
  <changelog author="imanyugin@suse.com" date="1478088000">- Version bump to 0.152.18
- Fix bsc#985474: SAPHanaSR-showAttr shows node ID instead of uname
- Fix bsc#1007825: SAPHanaSR-showAttr fails to show node status
- Fix bsc#1005872: SAPHana Resource Agent handling virtual hostnames
- Fix bsc#1007605: SAPHanaSR no longer ignores DR SR status</changelog>
  <changelog author="ilya.manyugin@suse.com" date="1482235200">- Version bump to 0.152.19
- Fix bsc#1014397: SAPHanaSR not failing over consistently
- Fix bsc#1008469: SAPHanaSR-monitor reports wrong status colors and error messages
- Add a cluster attribute hana_&lt;SID&gt;_version upon a probe of SAPHanaTopology
- Update man pages
- Change the Setup Guide to contain just the URL to the best practices
- Fix bsc#994753: Tool SAPHanaSR-showAttr fails to read offline cib file correctly
- Fix bsc#1016691: Status file of SAPHanaTopology is not multi instance aware (MCOS)
- Fix bsc#1016936: SAPHanaSR-TestDriver fails to detect the correct status
- Fix bsc#985822: HAWK Wizards are listed as legacy</changelog>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
</package>
<package pkgid="9b0e37d9ebbe1eea0466962702451e8b840f339b392e9290b9f425eee03516c9" name="SAPHanaSR-doc" arch="noarch">
  <version epoch="0" ver="0.161.1_BF" rel="150000.4.25.1"/>
  <changelog author="ilya.manyugin@suse.com" date="1482235200">- Version bump to 0.152.19
- Fix bsc#1014397: SAPHanaSR not failing over consistently
- Fix bsc#1008469: SAPHanaSR-monitor reports wrong status colors and error messages
- Add a cluster attribute hana_&lt;SID&gt;_version upon a probe of SAPHanaTopology
- Update man pages
- Change the Setup Guide to contain just the URL to the best practices
- Fix bsc#994753: Tool SAPHanaSR-showAttr fails to read offline cib file correctly
- Fix bsc#1016691: Status file of SAPHanaTopology is not multi instance aware (MCOS)
- Fix bsc#1016936: SAPHanaSR-TestDriver fails to detect the correct status
- Fix bsc#985822: HAWK Wizards are listed as legacy</changelog>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
</package>
<package pkgid="1e2a894f589b78f9600f1c273f5e273c5b7518c7fbf92ab87eb414dbd707dae6" name="SAPHanaSR-doc" arch="noarch">
  <version epoch="0" ver="0.162.0" rel="150000.4.28.1"/>
  <changelog author="imanyugin@suse.com" date="1487160000">- Version bump to 0.152.20
- Fix bsc#1019117: Fix master scoring of secondary during a takeover</changelog>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
</package>
<package pkgid="f50ccf224fb35cfc80da88d75d638ea9c486b82636d90d65c9e36658f514f377" name="SAPHanaSR-doc" arch="noarch">
  <version epoch="0" ver="0.162.1" rel="150000.4.31.1"/>
  <changelog author="imanyugin@suse.com" date="1493812800">- Fix bsc#1034685: SAPHanaTopology fails once after updating to 0.152.20</changelog>
  <changelog author="imanyugin@suse.com" date="1495800000">- Version bump to 0.152.21</changelog>
  <changelog author="imanyugin@suse.com" date="1496404800">- Fix bsc#1042154: Scoring race condition between SAPHanaTopology and SAPHana</changelog>
  <changelog author="imanyugin@suse.com" date="1499342400">- Fix bsc#1045606: update man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1508760000">- Fix bsc#1062267: SAPHanaSR wizard sets IPAddr2 agent's NIC to eth0</changelog>
  <changelog author="imanyugin@suse.com" date="1511179200">- FATE#323526: adjust HAWK2 Wizards to run on both Python 2 and 3</changelog>
  <changelog author="ro@suse.de" date="1517400000">- remove duplicate BuildArch line from specfile</changelog>
  <changelog author="imanyugin@suse.com" date="1526644800">- Version bump to 0.152.22
- Fix bsc#1091074:
    + Adjust Perl scripts to Perl 5.26.0
    + Remove show_SAPHanaSR_attributes
    + The user is advised to use SAPHanaSR-showAttr instead
- SAPHanaTopology: stricter match for system replication 'mode' in awk</changelog>
  <changelog author="abriel@suse.com" date="1567166400">- Version bump to 0.153.2
- rescore the master and fix some log string literals
- Fix bsc#1133866:
  Return $OCF_RUNNING_MASTER (8) instead of $OCF_SUCCESS (0) when
  probing a promoted node.
- If the SAP HANA CALL to 'landscapeHostConfiguration.py' is
  running into a timeout, do a retry of the command. If it still
  fails with a timeout, raise an error but do not set attributes
  to prevent unlogged failovers because of empty or unknown
  attributes.
  (bsc#1134106, bsc#1133024, bsc#1101373)
- Fix bsc#1082974:
  set attribute for remoteNode
- Fix bsc#1139715:
  Using crm-attributes written by a SAP HANA SR provider hook does
  improve the data integrity in special error conditions with
  multiple errors coming in a short time frame.
  Stabilized remote-site detection; SAPHana could now use a site
  specific SR cluster attribute which could be set by a SAP HA/DR
  provider call.
  Add a HA/DR provider hook script, config implementation and man
  page.
  Add parameter "HANA_CALL_TIMEOUT" to the RA configuration
  (SAPHanaTopology and SAPHanaSR) to set a timeout for HANA calls
  like landscapeHostConfiguration.py.
  Implemented "reload" method to allow changing parameters like
  "AUTOMATED_REGISTER"
  Set SWAIT during startup, but only if the attribute is already set
  Set PRIM after promote, but only if the attribute is already set
  The promote function has to set the return code according to the
  checks of the takeover result
  New tool SAPHanaSR-replay-archive, SAPHanaSR-filter and
  SAPHanaSR-showAttr to support SITE attributes</changelog>
  <changelog author="abriel@suse.com" date="1568203200">- fix typo in a condition statement (bnc#1149829)</changelog>
  <changelog author="abriel@suse.com" date="1573214400">- Version bump to 0.153.3
- The SAPHana resource agent must not down-score a SAP HANA
  Database site, if the landscape status is still 2, which means
  warning.
  Keep high scoring during recovery of the master name server.
  Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- change the shebang line of the HAWK2 templates to python3
  (bsc#1155423)</changelog>
  <changelog author="abriel@suse.com" date="1573819200">- Version bump to 0.154.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)</changelog>
  <changelog author="abriel@suse.com" date="1574337600">- restart sapstartsrv service on master nameserver node during
  monitor action, if needed. But NOT during probes.
  (bsc#1157453)</changelog>
  <changelog author="abriel@suse.com" date="1593691200">- Version bump to 0.154.1
- log empty site names, but do not generate bad formatted cluster
  attribute name
  (bsc#1173581)
- fix documentation of some parameter defaults
- adjust start/stop/promote/monitor action timeouts to match
  official recommendations</changelog>
  <changelog author="abriel@suse.com" date="1637668800">- Version bump to 0.155.0
- Add systemd support for the resource agent to interact with the
  new SAP unit files for sapstartsrv.
  As the new version of the SAP Startup Framework will use systemd
  unit files to control the sapstartsrv process instead of the
  previous used SysV init script, we need to adapt the handling of
  sapstartsrv inside the resource agents to support both ways.
  (bsc#1189530, bsc#1189531)
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- change promotion scoring during maintenance procedure to prevent
  that both sides have an equal promotion scoring after refresh
  which might result in a critical promotion of the secondary.
  (bsc#1174557)
- update of man page SAPHanaSR.py.7 - correct the supported HANA
  version.
  (bsc#1182201)
- if the $hdbState command fails to retrieve the current state of
  the System Replication, the resource agent now uses the
  system_replication/actual_mode attribute (if available) from the
  global.ini file as a fallback.
  This should prevent some confusing and misleading log messages
  during a takeover and solves the problem of a not working
  takeover back (after a successful first takeover)
  (bsc#1181765)
- add dedicated logging of HANA_CALL problems. So it will be now
  possible to identify, if the called hana command or the needed
  su command throws the error and for further hints we log the
  stderr output.
  Additional it is possible to get regular log messages for the
  used commands, their return code and their stderr output by
  enabling the 'debug' mode of the resource agents.
  (bsc#1182774)</changelog>
  <changelog author="abriel@suse.com" date="1654084800">- Version bump to 0.160.1
- fix HANA_CALL function to support MCOS environments again
  (bsc#1198780)
- fix SAPHanaSR-replay-archive to handle hb_report archives again
  (bsc#1198897)
- add HANA_CALL_TIMEOUT parameter back to the resource agents and
  read the setting from the cluster configuration, if available.
  Defaults to '60'.
  Related to github issue#36
- add new HA/DR provider hook susTkOver
  (jsc#SLE-16347)
- add new hook script for SAP HANA System Replication Scale-Up Cost
  Optimized Scenario.
  (jsc#SLE-18613)
- add a new instance parameter 'REMOVE_SAP_SOCKETS'.
  It is an optional parameter and defaults to 'true'. Now you can
  control, if the RA should remove the unix domain sockets related
  to sapstartsrv before (re-)start sapstartsrv or if it should try
  to adjust the permissions and ownership of these files instead.</changelog>
  <changelog author="abriel@suse.com" date="1661256000">- Version bump to 0.161.1_BF
- add the required 'xmllint' to the package
  (bsc#1201945)
- changes to the demote_clone function of the resource agent:
  if the role is '1:P' (topology agent run into timeouts) the
  function fail with rc=1, to get the managed resource stopped
  changes to the stop_clone function of the topology agent:
  call landscapeHostConfiguration.py and set the roles as they were
  reported. If the command timed out, set the role to '1:P' and
  return 1 to get the node fenced.
  The used timeout for the landscapeHostConfiguration.py call can
  be configured by the cluster action timeout, if needed. It will
  be 50% of the action timeout or the minimum of 300s.
  (bsc#1198127)
- add new HA/DR provider hook susChkSrv
  (jsc#PED-1241, jsc#PED-1240)
- add new tool SAPHanaSR-manageProvider to show, add and delete
  HA/DR provider sections in the global.ini of SAP HANA.
- update suse icon to new branding</changelog>
  <changelog author="varkoly@suse.com" date="1665057600">- SAPHanaSR-monitor not reporting correctly
  (bsc#1192963)
  add patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1669204800">- Version bump to 0.162.0
  * add improvements from SAP to the RA scripts regarding the
    handling of the SAP tools 'HDB version', 'HDBSettings.sh' and
    'pycd' and the SAPHana log filter handling
    (jsc#PED-1739, jsc#PED-2608)
  * fix for SAPHanaSR-monitor reporting "LPA status of one node is
    missing"
    (bsc#1192963, bsc#1203973)
  * SAPHanaSRTools.pm: shows terminate node attribute too
- remove patch:
    0001-bsc-1192963.patch</changelog>
  <changelog author="abriel@suse.com" date="1674561600">- Version bump to 0.162.1
  * fix for SAPHanaTopology failing with error code 1
    (OCF_ERR_GENERIC) during a normal stop action
    (bsc#1207466)
  * set srhook attribute to PRIM during a probe so that we do not
    need to wait for the first srConnectionChanged() to set the
    attribute
    (bsc#1205535)</changelog>
</package>
<package pkgid="40319f4268b6673b205399b03f5efe371473a6a9bef0cc84c4f0168663ea618e" name="SDL2" arch="src">
  <version epoch="0" ver="2.0.8" rel="150200.11.9.1"/>
  <changelog author="wbauer@tmo.at" date="1508155200">- Disable SSE3 (and also SSE2 on ix86) to prevent crashes on older
  CPUs that don't support these instructions</changelog>
  <changelog author="sreeves@suse.com" date="1508414400">- Add SDL-bnc1062784-check-overflow-xcf-props.patch. CVE-2017-2888</changelog>
  <changelog author="adam@mizerski.pl" date="1509192000">- update to 2.0.7
  * Added audio stream conversion functions.
  * Added functions to query and set the SDL memory allocation
    functions.
  * Added locking functions for multi-threaded access to
    the joystick and game controller APIs.
  * Some functions are now thread-safe.
- removed patches, merged upstream
  * dbus.diff
  * SDL2-ppc64-declaration-after-statement.patch
  * SDL-bnc1062784-check-overflow-xcf-props.patch</changelog>
  <changelog author="jengelh@inai.de" date="1515585600">- Add sdl2-symvers.patch.</changelog>
  <changelog author="jengelh@inai.de" date="1520510400">- Update to new upstream release 2.0.8
  * Added SDL_fmod() and SDL_log10().
  * Each of the SDL math functions now has the corresponding
    float version.
  * Added SDL_SetYUVConversionMode() and
    SDL_GetYUVConversionMode() to control the formula used when
    converting to and from YUV colorspace. The options are JPEG,
    BT.601, and BT.709.
  * Added the hint SDL_HINT_VIDEO_X11_NET_WM_BYPASS_COMPOSITOR to
    control whether the X server should skip the compositor for
    the SDL application. This defaults to "1".
  * Added the hint SDL_HINT_VIDEO_DOUBLE_BUFFER to control
    whether the Raspberry Pi and KMSDRM video drivers should use
    double or triple buffering (the default).</changelog>
  <changelog author="ytz1995@hotmail.com" date="1521288000">- Build with Wayland support</changelog>
  <changelog author="qzheng@suse.com" date="1551268800">- Add CVE-2019-7577.patch to fix a buffer over-read issue
  (CVE-2019-7577, boo#1124800).</changelog>
  <changelog author="qzheng@suse.com" date="1551355200">- Add CVE-2019-7637.patch to fix a heap-base buffer overflow
  issue (CVE-2019-7637, boo#1124825).</changelog>
  <changelog author="qzheng@suse.com" date="1551355201">- Add CVE-2019-7575.patch to fix a heap-based buffer overflow
  issue (CVE-2019-7575, boo#1124802).</changelog>
  <changelog author="qzheng@suse.com" date="1553083200">- Add CVE-2019-7574.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7574, boo#1124803).</changelog>
  <changelog author="qzheng@suse.com" date="1553083201">- Add CVE-2019-7572.patch to fix a buffer over-read issue
  (CVE-2019-7572, boo#1124806).</changelog>
  <changelog author="qzheng@suse.com" date="1553083202">- Add CVE-2019-7578.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7578, boo#1125099, CVE-2019-7576, boo#1124799
  CVE-2019-7573, boo#1124805).</changelog>
  <changelog author="qzheng@suse.com" date="1553083203">- Add CVE-2019-7635.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7635, boo#1124827).</changelog>
  <changelog author="qzheng@suse.com" date="1553083204">- Add CVE-2019-7636.patch to fix a heap-based buffer over-read
  issue (CVE-2019-7636, boo#1124826, CVE-2019-7638, boo#1124824).</changelog>
  <changelog author="qzheng@suse.com" date="1558612800">- Remove CVE-2019-7637.patch, the modification of function
  SDL_CalculatePitch is only suit for SDL not SDL2.</changelog>
  <changelog author="mgorse@suse.com" date="1566820800">- Add CVE-2019-13616.patch: fix heap buffer overflow when reading
  a crafted bmp file (boo#1141844 CVE-2019-13616).
- Add CVE-2019-13626.patch: add safeguards to the wav parser to
  prevent crashes (boo#1142031 CVE-2019-13626).
- Drop CVE-2019-7572.patch, CVE-2019-7574.patch,
  CVE-2019-7575.patch, CVE-2019-7577.patch, and
  CVE-2019-7578.patch: these are handled by the new code added in
  CVE-2019-13626.patch.</changelog>
  <changelog author="sndirsch@suse.com" date="1578225600">-  sdl2-khronos.patch
  * fixes build on i586 (boo#1158176)</changelog>
  <changelog author="mgorse@suse.com" date="1641902400">- Add sdl2-surface-pitch-overflow.patch: fix overflow in surface
  pitch calculation (boo#1181201 boo#1181202 CVE-2020-14410
  CVE-2020-14409).</changelog>
  <changelog author="mgorse@suse.com" date="1649160000">- Add CVE-2021-33657.patch: always create a full 256-entry color
  map in case color values are out of range (boo#1198001
  CVE-2021-33657).</changelog>
  <changelog author="mgorse@suse.com" date="1672747200">- Add CVE-2022-4743.patch: fix potential memory leak in
  GLES_CreateTexture (boo#1206727 CVE-2022-4743).</changelog>
</package>
<package pkgid="a7e15c59571f8ebcef036a6a0ccd29d81834c4f2df271518e3301f798ac65e97" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.3" rel="150400.4.3.1"/>
  <changelog author="mgorse@suse.com" date="1635249600">- Add webkit2gtk3-link-fix.patch: taken from upstream, fixes the
  build on SLE-15-SP4.
- Use gcc10 package on SLE &lt;= 15-SP4. Gcc 7 is currently the
  default there.
- Update gcc-c++ version requirement to match the cmake check.</changelog>
  <changelog author="mgorse@suse.com" date="1635768000">- Add wayland-protocols to BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635768001">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
</package>
<package pkgid="7a57d7deb6d9c8777feec4a86659990b090db594e76bc8ebff4c38cd1c341977" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.4" rel="150400.4.6.2"/>
  <changelog author="mgorse@suse.com" date="1635768000">- Add wayland-protocols to BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635768001">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
</package>
<package pkgid="bfb65ef0a4db8a38707b12ccc41a26548224d708c433e2f544da8d79ee5ff811" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.5" rel="150400.4.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1635768000">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
</package>
<package pkgid="313b1447c0a852708200c1cca835c623782b6c7fb0729bf10e5cc7909482df97" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.7" rel="150400.4.12.1"/>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
</package>
<package pkgid="84eb3b491c1ca98464a7d17496cda76c7dce5975c70efa9e820723f8191f2253" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.8" rel="150400.4.15.1"/>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
</package>
<package pkgid="c8dbc1814f4f5e75545f1788954d6888eb0d75e42b702938340df68b41626aae" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.38.2" rel="150400.4.22.1"/>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView?s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
</package>
<package pkgid="ad8557009983095599ae377c3bfafdca29ff422927cd4e07d61e61f7a95402b5" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.38.3" rel="150400.4.25.1"/>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView?s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42856.</changelog>
</package>
<package pkgid="fb9486ff7dbc4523f065bdeccdcd573a46ab9ea6f03aeae18b20f859f7cfc8d7" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.36.3" rel="150400.4.3.1"/>
  <changelog author="mgorse@suse.com" date="1635249600">- Add webkit2gtk3-link-fix.patch: taken from upstream, fixes the
  build on SLE-15-SP4.
- Use gcc10 package on SLE &lt;= 15-SP4. Gcc 7 is currently the
  default there.
- Update gcc-c++ version requirement to match the cmake check.</changelog>
  <changelog author="mgorse@suse.com" date="1635768000">- Add wayland-protocols to BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635768001">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
</package>
<package pkgid="693099a07e48757541f04121d3d13baeaef7042fa7c94b603c5584a29816eaf5" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.36.4" rel="150400.4.6.2"/>
  <changelog author="mgorse@suse.com" date="1635768000">- Add wayland-protocols to BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635768001">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
</package>
<package pkgid="f8bb0147753bb3b326d7ef5115c06480087988ea77ffd68f03553e7cf8ea9197" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.36.5" rel="150400.4.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1635768000">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
</package>
<package pkgid="6af46f986632a59198d0e7a78729e2fd6125e96c0076556073c3e22c8c579954" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.36.7" rel="150400.4.12.1"/>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
</package>
<package pkgid="ef5daf9bda1d30670c590b739c9b8ce6148eb0dd176b430e4cb817469f3f8233" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.36.8" rel="150400.4.15.1"/>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
</package>
<package pkgid="0b9445ee4423365a0ce3966bb610647dbba728150a5512eae74bafdf1e80e401" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.38.2" rel="150400.4.22.1"/>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView?s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
</package>
<package pkgid="0ff166bbbea4672d7c2f39b9b12af82ba023f33c55881e05ca4e4c25a0226897" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.38.3" rel="150400.4.25.1"/>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView?s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42856.</changelog>
</package>
<package pkgid="b97a8cdcde5f947cc879539e012eaf9c6ed2cf25f579f1e717c888bd26ef0aab" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.3" rel="150400.4.3.1"/>
  <changelog author="mgorse@suse.com" date="1635249600">- Add webkit2gtk3-link-fix.patch: taken from upstream, fixes the
  build on SLE-15-SP4.
- Use gcc10 package on SLE &lt;= 15-SP4. Gcc 7 is currently the
  default there.
- Update gcc-c++ version requirement to match the cmake check.</changelog>
  <changelog author="mgorse@suse.com" date="1635768000">- Add wayland-protocols to BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635768001">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
</package>
<package pkgid="cc385f6e841d4ad9df4c9541a5ec0ddd3a0cffec7d8cc2d1dea3ddd297d6b84d" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.4" rel="150400.4.6.2"/>
  <changelog author="mgorse@suse.com" date="1635768000">- Add wayland-protocols to BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635768001">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
</package>
<package pkgid="ba22c2c53f6266eef85ea3fa1510af9f6c1ef185749a6e52cf4fbd35aed8f88a" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.5" rel="150400.4.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1635768000">- Add pkgconfig(libavif) BuildRequires and pass USE_AVIF=ON to
  cmake, build avif decoding support.</changelog>
  <changelog author="mgorse@suse.com" date="1638014400">- Update to version 2.34.2:
  + Fix scrolling issues when pressing Home and PgDown keys.
  + Update effective appearance after web process switch on
    navigation.
  + Fix the build with video disabled.</changelog>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
</package>
<package pkgid="7ce7df45ce9b7717e778b96de5e8cc1bdbbdc245d0b4e134a3625e9572ee96f4" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.7" rel="150400.4.12.1"/>
  <changelog author="yfjiang@suse.com" date="1638964800">- Add Obsoletes of the old-name -lang package to be ready for
  updating from it. This change is necessary for the gtk3-soup2
  flavor.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
</package>
<package pkgid="e26abf4cdca0ebd1134b3457cb794287a7d038aaa987c53e92374732d6947ec6" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.36.8" rel="150400.4.15.1"/>
  <changelog author="yfjiang@suse.com" date="1639483200">- Make the earlier Obsoletes: libwebkit2gtk3-lang compliant with:
  https://en.opensuse.org/openSUSE:Upgrade_dependencies_explanation#Renaming_a_package</changelog>
  <changelog author="dimstar@opensuse.org" date="1639483201">- Introduce usegcc10 %define in order to have the condition
  (0%{?sle_version} &amp;&amp; 0%{?sle_version} &lt;= 150400) only at one
  point.
- Correct a very old "Obsoletes: webkit2gtk3-plugin-process-gtk2"
  to be a versioned obsoletes.</changelog>
  <changelog author="yfjiang@suse.com" date="1639483202">- Typo fix for %define usegcc10.</changelog>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
</package>
<package pkgid="7ecce30f2ee257d40c82375a2ea1b8a6789e9f89efe23f1689064efe6ff5856c" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.38.2" rel="150400.4.22.1"/>
  <changelog author="mgorse@suse.com" date="1640088000">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.</changelog>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView?s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
</package>
<package pkgid="1f76b018f6338f0f7bce681e0c0b601cf2ca07b75bfc0de2be2f9c590afa0b1b" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.38.3" rel="150400.4.25.1"/>
  <changelog author="fcrozat@suse.com" date="1642593600">- Update _constraints, needs more disk space to build.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642766400">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Add webkit2gtk3-gcc12.patch: fix the build with gcc 12.
- Require glib2 2.44 to match source.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643630400">- Update constraints for disk space even more, now at 20 gig.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView?s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42856.</changelog>
</package>
<package pkgid="0106268f1e61164d2d82fd523132a61a73b3a75bee33f4ec6815aba4394370f4" name="a52dec" arch="aarch64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="7dcd3b3ac0a7c3a21de0750e5b161b181bf090ab3620dfd51d1570e1a0243428" name="a52dec" arch="ppc64le">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="a735bc4c0b6174deb94517fc7b4a2a17752cc88b879f7b0829bef5c100246610" name="a52dec" arch="s390x">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="daf71641ecc69a3a885de7aea912fc1d2e7bdc8ad643ae74dfdd909ec82cc73d" name="a52dec" arch="src">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="waldemar@links2linux.de" date="1009627200">- first build</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1022760000">- update to Version 0.7.3</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1025697600">- update to Version 0.7.4</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1044446400">- added german description
- some changes I got from Philipp Thomas &lt;pthomas@suse.de&gt;</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1045915200">- added --enable-shared</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1048593600">- changes to use Packman upload-script</changelog>
  <changelog author="detlef@dreichelt.de" date="1101211200">- changes for x86_64:
  - added CFLAGS= -fPIC</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1208692800">- splitted in different packages</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1221912000">- rename of the lib packages</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="33ef1bacfcbaef55f12162503e0f367697e6e0b2474aa3c09671958536bbe73d" name="a52dec" arch="x86_64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="025ca519338f6aaaa0d5cf0f4e079f5d5ea8107b539c7853bc5fba2ba7e576e7" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="703074d4f11870b6199fc82bde752521d21ad9da0a6b61c43afb796adc76dbf2" name="aaa_base" arch="ppc64le">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="f1c30f44f104988da7c422b0b2a86d077ca227c64bc3c909c09289715865938f" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="0b01075518f884b372d1f81ea9253bd635cec6b0e0f84e905f2cd2e34b697e18" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="daaa881123df8f47e6826d9de28473dbb9887076df26a6f68fe008f1542a0a02" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="564b69a7d569cf56a88af645a81bc097b50a2fbe61c51f2e79b442d8ee4b2be1" name="aaa_base-extras" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="54e90b842e775151835d26cb77eb4cfe8bd6aaeb17ba8cd91d854ed298e19fc2" name="aaa_base-extras" arch="ppc64le">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="0a3d90938291de33f2d8da5d9a0c3871b09fe46e658df42fb16359691993760c" name="aaa_base-extras" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="858791a9c3570b8ef072be36703b5f359031a0c770f88f7e51a882986023ae58" name="aaa_base-extras" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="7dddb1c4bf9b679cd5abc0b83ad99595600a2acc3bbfce414d91afa93ec094f5" name="aaa_base-malloccheck" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="44f7bd25ac58a7184897c900a8028408332a5b4229645a3744a562364963516a" name="aaa_base-malloccheck" arch="ppc64le">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="c68d05b75de68ded673a5c95e7d2fa052a7a991a893e672bcf4404cd831da638" name="aaa_base-malloccheck" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="6a08f8b2ed45aedc4faaeb132a82d96a88d376dc7211b13c2c37c823e7124be7" name="aaa_base-malloccheck" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="eba6f27842a2e5f2f2b65bb1558333341a58c594a1d2c2cd8f3454c3ab739014" name="aaa_base-wsl" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="c058a53084750cf9a57c76c5f646f5557ead4bd3a4b77b29e1dec0ac3ecea957" name="aaa_base-wsl" arch="ppc64le">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="63e6bc10d422a4d81a02afd1c720ad53db14b0b79f54f2623a0e866d1e9b402b" name="aaa_base-wsl" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="a6cafef3cf388fa63db5033a09a12124f1c04db78d681d34ca724d4820b10fdb" name="aaa_base-wsl" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.3.1"/>
  <changelog author="ro@suse.de" date="1563451200">- Add patch git-06-8640f848c6677f1149b9765a8c86135956604007.patch
  * Make systemd detection cgroup oblivious (bsc#1140647)
    systemd can work in three exclusive cgroup modes: legacy, hybrid and
    unified. The mode affects where and what cgroup hierarchies are mounted.
    detect running systemd as systemd itself does it
    (src/libsystemd/sd-daemon/sd-daemon.c, function sd_booted)</changelog>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
</package>
<package pkgid="aec47488f547172ed4e975018ba2d56a4afab1a64dd9aca3c1ec48cbe1b5252b" name="abseil-cpp" arch="aarch64">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="73056a9e48647990fc88b5b5a0d11fb609865fe63cc97f0ee8358f593b133e45" name="abseil-cpp" arch="ppc64le">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="b15062db2a05be27e676d0b6d30f96f5fb47ff5e34138cad206789522f1eef8d" name="abseil-cpp" arch="s390x">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="759dd254206b1ae87989050cf6bef57564201e60d968a080d0ee49ac6f157f36" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="d21c8a97178ab61a0b87d84dcaf351b0e4dcc09880586552b3486b94e14b30fb" name="abseil-cpp" arch="x86_64">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="b33b1c9ccbe27dc36a4f668b9d44e764556c2efd4e9d0a2856901721737b32bf" name="abseil-cpp" arch="aarch64">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="50f2473161f125cf053daa6783c9951dfe114133952f7b8681081160d8e5e2e8" name="abseil-cpp" arch="ppc64le">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="599844e6ad658243d57a6d3b157af440e5603dc96965d3e1f06b47c0732ef6d0" name="abseil-cpp" arch="s390x">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="4c13e74e09aab68edf3b15353dc22c1fe755190a27aac62cc2b37c6d57624d44" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="b65bb56f287ebdfbd36ff65d53195cf2b059a6f44d98abc9014f4a76d1a6483b" name="abseil-cpp" arch="x86_64">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="bddb9dbf3fe455d31b30766dabaf2d087bebf6d264ec85b5d4074c0cb881ba5b" name="abseil-cpp-devel" arch="aarch64">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="ea278c289782b3c30f894cc9751fdb7ace893d96a9ec4281b936c7f2ce2b5b51" name="abseil-cpp-devel" arch="ppc64le">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="f6dde428d122b69b48576d81f628b640900c9cb6f70751b22ed7848cc0f51ca5" name="abseil-cpp-devel" arch="s390x">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="72eeb841e7a8306b29f9a6d17c43a8e0c3a49d2d8da11bfd0febf4aafb50d2e3" name="abseil-cpp-devel" arch="x86_64">
  <version epoch="0" ver="20211102.0" rel="150300.7.3.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551355200">- Fix build with Bazel 0.22.0.
- Add optflags.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
</package>
<package pkgid="fb349ecf237abf655d1781165fd59fdd6f775e0b25cd8cfb7f89150839782646" name="abseil-cpp-devel" arch="aarch64">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="5ff7027d237df2366917cba997b456167f592097453bcb02aa3d706fdc2cc830" name="abseil-cpp-devel" arch="ppc64le">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="e3978bc854dce03ebe43830e893ed7a1cb476d87155a2c8e8b45c883d589d9f5" name="abseil-cpp-devel" arch="s390x">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="48723eeefafe3feeae96484106404892d4dda717369d8902bc62f867ac425cda" name="abseil-cpp-devel" arch="x86_64">
  <version epoch="0" ver="20211102.0" rel="150300.7.6.1"/>
  <changelog author="mrostecki@opensuse.org" date="1551960000">- Add soname to all *.so* files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1563969600">- Use bazel0.19 as build fails with the latest bazel (0.26)</changelog>
  <changelog author="mrostecki@opensuse.org" date="1568894400">- Add source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1569240000">- Update to version 20190605:
  * avoid use of undefined ABSL_HAVE_ELF_MEM_IMAGE
  * Avoid undefined behavior when nullptr is passed to memcpy with size 0
  * CMake: Set correct flags for clang-cl
  * Adding linking of CoreFoundation to CMakeLists in absl/time as
    time_zone_lookup.cc includes CoreFoundation
  * Implement Span::first and Span::last from C++20
  * Changed HTTP URLs to HTTPS where possible
  * Fix GCC8 warnings
  * Fix library order for Conan package
  * _umul128 is not available on Windows ARM64
  * Add note at top that this is supported best-effort
  * Update Conan author
  * Add Conan topics
  * Remove cctz as external dependency
  * Add Conan recipe</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="bwiedemann@suse.com" date="1574510400">- Sort find output to make build reproducible (boo#1041090)</changelog>
  <changelog author="svasudevan@suse.com" date="1576670400">- Update to version 20190808</changelog>
  <changelog author="dimstar@opensuse.org" date="1579003200">- Set ExcludeArch: %ix86: bazel is required to build which in turn
  is not supported on ix86.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579176000">- Remove all packages except source.</changelog>
  <changelog author="elimat@opensuse.org" date="1595592000">- Update to version 20200225.2
  * This release fixes the list of dependencies of absl::Cord in the CMake build.
  * bug fix for absl::Status::ErasePayload</changelog>
  <changelog author="jengelh@inai.de" date="1599307200">- Switch the package to noarch.</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Build shared libraries of abseil for use by grpc
  (related to https://github.com/grpc/grpc/issues/24476)</changelog>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663070400">- Add options-old.patch
  * Make the headers always tell the truth about the ABI to fix
    linker error when using new compilers (boo#1203378)
- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
</package>
<package pkgid="617c054a7290f9aba606beb66688ebd786ca07dbef99d82f8872210fddb63ffc" name="adcli" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="391b073cb6ada4205c3b9b7e0a540941ffb6187eb5f7c215a1047eec3490daea" name="adcli" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="0471c930d530f4084505f7099be647c2fbf3a0639bac01aae97b3774625a92b6" name="adcli" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="3f8025d5918e2d9a46f650fb66f105621e5dfb38b81d79ecf91bf20f5bee9e27" name="adcli" arch="src">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="4b3ee0ba75f68d56a9bf620796672ab6f25a5d765a062cd002ee7bfebc272a26" name="adcli" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="a618bfc95c8f67a575830ac3126d2c06c66b933708942992a84626ec9c9c919a" name="adcli-doc" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="c707fce241d50152edf0e8e74dd306c0e8f7475f501894104a4ca0396282fffe" name="adcli-doc" arch="ppc64le">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="e67f933091c6248d547609e9f1d7f247744170a96e5d784d1a7fcec65ebeaf03" name="adcli-doc" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="f1f97e95cfc2111682cf971969832a837371b85adcc4c649d013ea6956c0fb58" name="adcli-doc" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150400.17.3.1"/>
  <changelog author="ckowalczyk@suse.com" date="1537531200">- Initial build (fate#326619, bsc#1109849)</changelog>
  <changelog author="scabrero@suse.de" date="1574337600">- The userPrincipalName attribute was not added to the created
  machine (bsc#1157491)
- The host FQDN was not properly detected (bsc#1157491)
- Added patches:
  * 0001-Remove-upper-case-only-check-when-looking-for-the-Ne.patch
  * 0002-Use-strdup-if-offsets-are-used.patch
  * 0003-correct-spelling-of-adcli_tool_computer_delete-descr.patch
  * 0004-doc-explain-that-all-credential-cache-types-are-supp.patch
  * 0005-library-add-adcli_conn_is_writeable.patch
  * 0006-Handle-kvno-increment-for-RODCs.patch
  * 0007-library-add-_adcli_bin_sid_to_str.patch
  * 0008-library-add-_adcli_call_external_program.patch
  * 0009-library-add-_adcli_ldap_parse_sid.patch
  * 0010-library-add-lookup_domain_sid.patch
  * 0011-library-add-adcli_conn_get_domain_sid.patch
  * 0012-Fix-memory-leak-in-test_check_nt_time_string_lifetim.patch
  * 0013-Add-trusted-for-delegation-option.patch
  * 0014-Only-update-attributes-given-on-the-command-line.patch
  * 0015-update-allow-to-add-service-names.patch
  * 0016-Calculate-enctypes-in-a-separate-function.patch
  * 0017-join-add-all-attributes-while-creating-computer-obje.patch
  * 0018-util-add-_adcli_strv_remove_unsorted.patch
  * 0019-Add-add-service-principal-and-remove-service-princip.patch
  * 0020-Do-not-add-service-principals-twice.patch
  * 0021-Do-not-depend-on-default_realm-in-krb5.conf.patch
  * 0022-adutil-add-_adcli_strv_add_unique.patch
  * 0023-adenroll-use-_adcli_strv_add_unique-for-service-prin.patch
  * 0024-Increment-kvno-after-password-change-with-user-creds.patch
  * 0025-library-use-getaddrinfo-with-AI_CANONNAME-to-find-a-.patch</changelog>
  <changelog author="scabrero@suse.de" date="1582200000">- Use GSS-SPNEGO if available (bsc#1162518)
  * 0026-Use-GSS-SPNEGO-if-available.patch
- Add option to use ldaps (bsc#1162518)
  * 0027-add-option-use-ldaps.patch</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets database after changing the machine password
  (jsc#sle-11503)
  * 0028-tools-add-option-add-samba-data.patch
  * 0029-tools-store-Samba-data-if-requested.patch
  * 0030-make-Samba-data-tool-configurable.patch
  * 0031-fix-typo-in-flag-value.patch
  * 0032-samba-data-tool-needs-to-take-an-argument.patch
  * 0033-doc-add-missing-samba_data_tool_path.xml-.in-to-EXTR.patch
- Support testjoin command (jsc#sle-11503)
  * 0034-Implement-adcli-testjoin.patch</changelog>
  <changelog author="scabrero@suse.de" date="1617969600">- Respect allowed Kerberos encryption types; (bsc#1184462);
  Add 0035-handle-encryption-types.patch</changelog>
  <changelog author="scabrero@suse.de" date="1635163200">- Add --dont-expire-password option; (jsc#sle-21225);
  * 0036-Add-dont-expire-password-option.patch
  * 0037-Fix-for-dont-expire-password-option-and-join.patch</changelog>
  <changelog author="scabrero@suse.de" date="1661947200">- Remove errx() calls on error conditions to execute the cleanup
  function and delete the krb5 snippets created in /tmp;
  (bsc#1202647);
  * Add 0038-Remove-errx-from-tools.patch
- Set umask before calling mkdtemp; (bsc#1202647);
  * Add 0039-Set-umask-before-calling-mkdtemp.patch</changelog>
</package>
<package pkgid="b936728c748d4c05ac4a89054b418e5ac26775925401e097631f87c66650483d" name="adios-gnu-mpich-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="21f3e5fb658656cbae2fbaad9e0ae72762e64270620e4d5b1e016d3100feb703" name="adios-gnu-mpich-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="29c3f3587aac1caa8c8382eca82adc270ccb3aa2bedb5ce04c1c5164394b093c" name="adios-gnu-mpich-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="2512cf1d107fcc894f3d22151286b72205db29c921bb8267debd6e03c6afd897" name="adios-gnu-mvapich2-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="4f8241869515a01335b5d4217009753ee91c46fa24e305725f8b0d7038360050" name="adios-gnu-mvapich2-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="3698e4eccdd0928a71cc81be6002b0d8c05d4e10d22ab8149006c77dcfb69fcd" name="adios-gnu-mvapich2-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="d8aeebd644fddc179345df6d162197c1080899c4ae9bf1c857b264f7f66cf68c" name="adios-gnu-openmpi2-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="eb427282166aedecb69df8f0773aa57e08247762263a043ae2877cafaafa5afc" name="adios-gnu-openmpi2-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="d698f2740176cf9b2de127d160b973a16a7049c986d96d3c857954a68cb87f82" name="adios-gnu-openmpi2-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="7755407dd5ead6aff83f4d87a43b0820d948fe5ec82bc99a52361ca59144b533" name="adios-gnu-openmpi3-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="5ec0fee4ecfba23269c52b3d5c1942cd5f14ce7909de2da3f6cf73b577ecb878" name="adios-gnu-openmpi3-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="c74d064a199ca6151707cf7ce34e41a91949b25e2b3a4ac39b93d90c23a9e498" name="adios-gnu-openmpi3-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="46df3ae2fe9ae3b40711518de967d259ea6b1fc4707e124dd8e5cc12d52503b6" name="adios-gnu-openmpi4-hpc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="14c9cd209fd2e753199b530422b8122bc90e3232975ee3a96943da5abf8a7386" name="adios-gnu-openmpi4-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="bd68f15629b03ec9ab589ec45a435f7ca73761a28ad210164313b122e372e475" name="adios-gnu-openmpi4-hpc-devel-static" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="6edbbdba15543c59aaf3c2212e7a989763bac0a462ae8642a31ca446507a35c2" name="adios_1_13_1-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="6fcbd01d5233819b4cfe178fd96142db087ed529f8c19a471d94db3b1d36eee6" name="adios_1_13_1-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="44863a68681f515a7895f0e017b254c5e985ddae38197b3fa904358a98ccbbc4" name="adios_1_13_1-gnu-mpich-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="03631f799997b18a7036ff02857ea5ca5fa4dcd547979f861e7894256f3e338d" name="adios_1_13_1-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="ede31ca73a7131cef417a21de5fdf9ee6242bab9a387a53f2dab8e8b844267b4" name="adios_1_13_1-gnu-mpich-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="f11d10b3d09ba38ce26246d10a327848a4e55522f51043e5bfa8254366efa25b" name="adios_1_13_1-gnu-mpich-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="0332ed46dd6e42b3d86edd91c6cc63e2f175a98570febbc47cebbcc40ef87bcb" name="adios_1_13_1-gnu-mpich-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="4393066728e3c26bc4eab22a2c91d1e647be09f9109111bad2f4c769c48708cb" name="adios_1_13_1-gnu-mpich-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="2c111937e5647854659e69667e74c818b73299ba6251ae20670b40cd338b0f54" name="adios_1_13_1-gnu-mpich-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="29a27395723d23856ba603a25321534711fea70481c72c25549d45041a2c6555" name="adios_1_13_1-gnu-mpich-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="2f0c6155e72fa1f2739356b98a46da9da2018aaf054870d88761fb44e961f714" name="adios_1_13_1-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="15e4c09bc679ef66f291d8fe38cdb58d381b4fd1a20d447e1e31c026678a8e9a" name="adios_1_13_1-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="61b2eb29e076b26f5aa760d957f3cb1635d7a41ed91fdaad7350809b99265877" name="adios_1_13_1-gnu-mvapich2-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="2b0bf3a601a735f9f7bd709053f45d84263273429bb73909e50f52c98655f512" name="adios_1_13_1-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="8d5c8013270ffbf839bfbc59b43639b3669cbd0e99d6e791190e75063bb83375" name="adios_1_13_1-gnu-mvapich2-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="3d3ec994e7bb81b5b7f7649d84070e74e2669190ed1474be902b2319d392be08" name="adios_1_13_1-gnu-mvapich2-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="4dcee28aa44b4765609a76f994e0aa5ca142d0e6eee47138ead0183a5a9bd5bc" name="adios_1_13_1-gnu-mvapich2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="547f0f72fa894a2a31ba454b8ee5139223b0118314fd6ea3c7f20756cd2fd22e" name="adios_1_13_1-gnu-mvapich2-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="7b9213087bb094680be5867936467a9f75b841464bc0416e78918e8cad989d93" name="adios_1_13_1-gnu-mvapich2-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="613a10b2ed7bebac261e50bed12d5ff135774285e36a030d2089ab9268c3d9ab" name="adios_1_13_1-gnu-mvapich2-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="b657eeade2659490895b05eaa4cf23eb950f35540c22ac368dac3bfe0f823aca" name="adios_1_13_1-gnu-openmpi2-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="4d53385a135326abeb85eb2b52a627bf7252f91443782f693a12f37a9dd96d82" name="adios_1_13_1-gnu-openmpi2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="b9371955a115a5f126136c958a8ed5421b493d0622f6b709dc599ee7f33c9ca9" name="adios_1_13_1-gnu-openmpi2-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="b5f46626a6114fefc45c4349dbe815e0283256157ede600158d47e0cd3648675" name="adios_1_13_1-gnu-openmpi2-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="38a4a6d90dae97a7f4de3f3e22405d81caa71f92e531aacfb20a69c0caeecf72" name="adios_1_13_1-gnu-openmpi2-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="926c2e082bbb9f703cf7a7e7851e2790a380bf1527ae56defa42935142eb4625" name="adios_1_13_1-gnu-openmpi2-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="faa13dd6cf04d0ed0cac94d48a544f05d799188d587a10a18248c9117a0aacba" name="adios_1_13_1-gnu-openmpi2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="c686c21bd4d76d57459817e30d4c3df9c62adf5e828bd8d4989343e1d98e66f3" name="adios_1_13_1-gnu-openmpi2-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="35c6c2e36c3bad7d93adeb895c5e27d49db8858b0bdb407db51b3138e8590cc7" name="adios_1_13_1-gnu-openmpi2-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="7f4f7ccb6c2870525a7beda32faa42c989a41c208046a0883c38f53c9b73a4b1" name="adios_1_13_1-gnu-openmpi2-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="bc097564e53bcb80934b34a2531fdb5785914a24609e716c0528c7fd1bbf9c73" name="adios_1_13_1-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="d9cfb8a9a645879fb0e906c8c0913ee9e8e57ba62560099ce312ba77d9b4c0c6" name="adios_1_13_1-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="9095286e84e2764c7544660a80faa31255f93918dd4009e66a6322a91298e813" name="adios_1_13_1-gnu-openmpi3-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="bdcad76556702c6e8a2bf9fc8bd5575c2d1411a97f722b70b1d7757be0509464" name="adios_1_13_1-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="276a19936dd28b99c3c290c63a437a97136c1f3ea1ba16a1dfda135126008746" name="adios_1_13_1-gnu-openmpi3-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="f55d8e3e2d505cb1e7513ae173991434869047a1257529b3507a2aca2a3d5682" name="adios_1_13_1-gnu-openmpi3-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="b5f3f3fcb3a630637722805a0cf9cf19b419f2a298b01fef27ab8725cbb020ab" name="adios_1_13_1-gnu-openmpi3-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="f98a84be748ff04127cca79eb6cec664d7ed156a1fe6040412ff8b29da758849" name="adios_1_13_1-gnu-openmpi3-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="ab7fa908bce4bece928373d83046457fc167df0c9eebadb9af9b45e4d360f35f" name="adios_1_13_1-gnu-openmpi3-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="c0040e3a77981928f8e65e48328d5095a4c60187e93067a3ff578c90b64bc0b1" name="adios_1_13_1-gnu-openmpi3-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="1bde2d8975ea658c99acc9394b08cd8cdc4baebeebde6ea60b1696da6f69a7a7" name="adios_1_13_1-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="00b1a1bd673db3bfae317d9b5368c3f4aace46ffd11cb51a89544aaee333d8ce" name="adios_1_13_1-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="5c1e4eeb9fb452ed79ec5f6f63d6f46e5ba6749bc65551e911fbe9f32d92b76f" name="adios_1_13_1-gnu-openmpi4-hpc" arch="src">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="81d19c9c74e195d20e9b20dc738d009e8860263857c850766d4ad5e04e090664" name="adios_1_13_1-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="c5e2666901ebd8056758ecb2ea9f822796eba031f2bc647ba7d01e7a2798e8e2" name="adios_1_13_1-gnu-openmpi4-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="8657a4a62449ac650522ce1d6ee44caa77115cd915be211af651b7470420017a" name="adios_1_13_1-gnu-openmpi4-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="56630b4985e5df4e815356a671bb8b62b90e8bb5530ddfccab20b4dfbf1be87c" name="adios_1_13_1-gnu-openmpi4-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="f503360f1860c6e663e2ab0a26bae650c6fcbeae812b799a82765a62054601b9" name="adios_1_13_1-gnu-openmpi4-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="cba9f9829a4762cd39fa5d5ff86dded6656c73fff059c80555d663bf8382a1ac" name="adios_1_13_1-gnu-openmpi4-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="4a2ffcc653360d00c3da58e9dcd197054837cb5f5eda7a38c522892ccd647873" name="adios_1_13_1-gnu-openmpi4-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.13.1" rel="150300.12.2.1"/>
  <changelog author="jjolly@suse.com" date="1515153600">- First pass on adios specfile</changelog>
  <changelog author="jjolly@suse.com" date="1515499200">- Added hpc macros support
  * Added _multibuild with serial, openmpi, and gnu-openmpi-hpc
  * Created devel package and module package
  * Created lua lmod module file for adios
- Added adios-correct-func-ret.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1550664000">- Update to version 1.31.1 (jsc#SLE-6004)
- Add python support:
  * This is only for Python2
  * Update in the module file
  * Add needed Requires on python2-xml and python2-PyYAML
- Fix a few python shebangs with patch fix_python_shebang.patch
- Add a Requires on hdf5 for every mpi flavor and update the module
  file with 'depends-on phdf5'.
- Add examples packages. It's only created for the openmpi flavor
  to avoid having several packages with the same content.
- Spec file polishing: spec-cleaner and update to the lastest
  packaging convention for HPC packages.</changelog>
  <changelog author="aguerrero@suse.com" date="1553515200">- Re-add CPATH, C_INCLUDE_PATH and CPLUS_INCLUDE_PATH to the module
  file.
- Add a separate package with the examples in two flavors one for
  non-HPC and another one for HPC: examples and examples-hpc.
- Update Requires for the devel package.</changelog>
  <changelog author="aguerrero@suse.com" date="1553774400">- Drop the packages and flavors for examples/examples-hpc. It's easier
  for an interested user to download directly the source package and build
  them directly.
- Update the URLs to use https
- Add -L option to the standard master package
- Delete the module .version file in the %postun if it's the default one
- Use the macro %hpc_modules_init to load the module files</changelog>
  <changelog author="jengelh@inai.de" date="1553860800">- Generalize and trim bias from description.</changelog>
  <changelog author="aguerrero@suse.com" date="1554724800">- Update Licensing.</changelog>
  <changelog author="aguerrero@suse.com" date="1554897600">- Fix path for the files that were installed directly at /etc.</changelog>
  <changelog author="aguerrero@suse.com" date="1556539200">- Move the static libraries to a -devel-static packages. Adios doesn't
  provides shared libraries and the static libraries are required for
  the bindings to work.</changelog>
  <changelog author="aguerrero@suse.com" date="1570449600">- Remake patch adios-correct-func-ret.patch to make sure the functions
  return something instead of changing the return type from int to void.</changelog>
  <changelog author="aguerrero@suse.com" date="1571400000">- Disable openmpi3 and the openmpi flavor in SLE.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1574942400">- Fix aarch64 LTO build with -ffat-lto-objects flag</changelog>
  <changelog author="aguerrero@suse.com" date="1575028800">- Add missing FCFLAGS export</changelog>
  <changelog author="eich@suse.com" date="1575028801">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).
- Disable build on s390/s390x as netcdf is not available (bsc#1157965).
- Fix openmpi1 names for non-HPC builds on Factory.</changelog>
  <changelog author="eich@suse.com" date="1575028802">- Add support for gcc7.
- Add support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575115200">- Correct naming of openmpi1 packages in Leap 15.0/15.1 (still
  called openmpi), fixes unresolvable packages.
- Add non-HPC openmpi2 and openmpi3 flavors.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595073600">- Drop numpy build dependency. The numpy wrapper is currently not
  built, and can be built separately.
- Add -fallow-argument-mismatch Fortran flag to workaround
  GFortran10 being more strict by default.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595246400">- Adapt to HPC module netcdf naming change (boo#1174291).</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1612526400">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Add Fix-code-to-be-python3-compliant.patch:
  Remove python2 code and dependencies.</changelog>
</package>
<package pkgid="d17b91d86f2cbec14a0909037f3732625f0181e272854ef79805c9be26437302" name="amavisd-milter" arch="aarch64">
  <version epoch="0" ver="1.7.2" rel="150400.9.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1614168000">- Initial release of amavisd-milter (unbundled from amavisd-new)
- Update to version 1.7.1
  * An empty sender must always be enclosed in angle brackets.
- Update to version 1.7.0
  * Fork after initializing milter socket.
  * Use client_name if available instead of hostname passed to xxfi_connect.
  * Generate amamvisd-milter.8 from AMAVISD-MILTER.md.
  * Fixed compiler warnings.
  * Converted indentation to spaces only.
  * Removed obsoleted file amavisd-milter.spec.</changelog>
  <changelog author="jsegitz@suse.com" date="1627473600">- Added hardening to systemd service(s). Modified:
  * amavisd-milter.service</changelog>
  <changelog author="suse+build@de-korte.org" date="1641297600">- Update to version 1.7.2
  * The SMTP_AUTH* attributes are missing in policy_bank.</changelog>
</package>
<package pkgid="8f4a9b8cd528c694a9ebed17bf1454bbd0c801d40acd80197e4a3cb25ad33a12" name="amavisd-milter" arch="ppc64le">
  <version epoch="0" ver="1.7.2" rel="150400.9.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1614168000">- Initial release of amavisd-milter (unbundled from amavisd-new)
- Update to version 1.7.1
  * An empty sender must always be enclosed in angle brackets.
- Update to version 1.7.0
  * Fork after initializing milter socket.
  * Use client_name if available instead of hostname passed to xxfi_connect.
  * Generate amamvisd-milter.8 from AMAVISD-MILTER.md.
  * Fixed compiler warnings.
  * Converted indentation to spaces only.
  * Removed obsoleted file amavisd-milter.spec.</changelog>
  <changelog author="jsegitz@suse.com" date="1627473600">- Added hardening to systemd service(s). Modified:
  * amavisd-milter.service</changelog>
  <changelog author="suse+build@de-korte.org" date="1641297600">- Update to version 1.7.2
  * The SMTP_AUTH* attributes are missing in policy_bank.</changelog>
</package>
<package pkgid="2292eae266af43fa70c2c1b6517de777b13841f8a89e1f956909bf344c6ea8b8" name="amavisd-milter" arch="s390x">
  <version epoch="0" ver="1.7.2" rel="150400.9.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1614168000">- Initial release of amavisd-milter (unbundled from amavisd-new)
- Update to version 1.7.1
  * An empty sender must always be enclosed in angle brackets.
- Update to version 1.7.0
  * Fork after initializing milter socket.
  * Use client_name if available instead of hostname passed to xxfi_connect.
  * Generate amamvisd-milter.8 from AMAVISD-MILTER.md.
  * Fixed compiler warnings.
  * Converted indentation to spaces only.
  * Removed obsoleted file amavisd-milter.spec.</changelog>
  <changelog author="jsegitz@suse.com" date="1627473600">- Added hardening to systemd service(s). Modified:
  * amavisd-milter.service</changelog>
  <changelog author="suse+build@de-korte.org" date="1641297600">- Update to version 1.7.2
  * The SMTP_AUTH* attributes are missing in policy_bank.</changelog>
</package>
<package pkgid="dbd076ab21aee038e0673d5cea8a094d761e7495ab8dfeaed5175338224ed77b" name="amavisd-milter" arch="src">
  <version epoch="0" ver="1.7.2" rel="150400.9.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1614168000">- Initial release of amavisd-milter (unbundled from amavisd-new)
- Update to version 1.7.1
  * An empty sender must always be enclosed in angle brackets.
- Update to version 1.7.0
  * Fork after initializing milter socket.
  * Use client_name if available instead of hostname passed to xxfi_connect.
  * Generate amamvisd-milter.8 from AMAVISD-MILTER.md.
  * Fixed compiler warnings.
  * Converted indentation to spaces only.
  * Removed obsoleted file amavisd-milter.spec.</changelog>
  <changelog author="jsegitz@suse.com" date="1627473600">- Added hardening to systemd service(s). Modified:
  * amavisd-milter.service</changelog>
  <changelog author="suse+build@de-korte.org" date="1641297600">- Update to version 1.7.2
  * The SMTP_AUTH* attributes are missing in policy_bank.</changelog>
</package>
<package pkgid="56fa423745ee7e5ac3cb97dcd1b7a14175e3a4d8fef3b202398bcf5ffed208be" name="amavisd-milter" arch="x86_64">
  <version epoch="0" ver="1.7.2" rel="150400.9.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1614168000">- Initial release of amavisd-milter (unbundled from amavisd-new)
- Update to version 1.7.1
  * An empty sender must always be enclosed in angle brackets.
- Update to version 1.7.0
  * Fork after initializing milter socket.
  * Use client_name if available instead of hostname passed to xxfi_connect.
  * Generate amamvisd-milter.8 from AMAVISD-MILTER.md.
  * Fixed compiler warnings.
  * Converted indentation to spaces only.
  * Removed obsoleted file amavisd-milter.spec.</changelog>
  <changelog author="jsegitz@suse.com" date="1627473600">- Added hardening to systemd service(s). Modified:
  * amavisd-milter.service</changelog>
  <changelog author="suse+build@de-korte.org" date="1641297600">- Update to version 1.7.2
  * The SMTP_AUTH* attributes are missing in policy_bank.</changelog>
</package>
<package pkgid="ce8f97588132dcdbaeef6f6fdb5dd9b8fe3d05cccf6718f4c45c09806768cc6b" name="amavisd-new" arch="aarch64">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="5218d74c546afc1d75d8c27e3f0ae40a595f533879117c283e129029da96a072" name="amavisd-new" arch="ppc64le">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="57b22da898980e9e48963ada0568172aeb5d199d890fac053dbd5817d07cbfca" name="amavisd-new" arch="s390x">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="f3287ebfc205cce70a5f2b87e7fc5e6fb3e2ee9d292a466a2026d0d2fb7c4701" name="amavisd-new" arch="src">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="b1cdd83fe815c643706202cac875dec79fa63118c325637659edd7963eff5f61" name="amavisd-new" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="3e21115d02b8d74e09e1caf8db8310ae5efda9e0a0631faa932e25c27ea5ec4e" name="amavisd-new-docs" arch="aarch64">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="35b142c989009abae7d5978f079e3ec8753a9f0c01bc0ecee8c2fe3c33c6b1c3" name="amavisd-new-docs" arch="ppc64le">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="80f4a1d51178870c66fb1fecffc203956d0434bbed4024ae8cc6e2e6dfded00d" name="amavisd-new-docs" arch="s390x">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="d4bd4232f1c5224958ff2532f3af2ccc44899df24204fda2c0216ccfd80a207d" name="amavisd-new-docs" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="425e1ada660b8ca29f36d853eb925fbae2c3755dd62bc226cd7a960df0596500" name="amazon-ssm-agent" arch="aarch64">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.9.2"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="51e139bf82ace84569217967cc5cf5070c5c5f95291f61e6e30b69797910c146" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.9.2"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="ccf31da6a0a9250ff40d264fa84b396d05fbb95a1b2a638d8fb4bba676a860de" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.9.2"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="eaee8a2af0334e4cad0f336086acd48c37ae572ba711bcd8b9d38338cf7ab276" name="ansible" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="150000.1.14.1"/>
  <changelog author="mcepl@suse.com" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="michael@stroeder.com" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="egdfree@opensuse.org" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="michael@stroeder.com" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="michael@stroeder.com" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="michael@stroeder.com" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="michael@stroeder.com" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="michael@stroeder.com" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="michael@stroeder.com" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes
  * CVE-2021-20228 (bsc#1181935) basic.py no_log with fallback option
  * CVE-2021-20191 (bsc#1181119) multiple collections exposes secured values
  * CVE-2021-20180 (bsc#1180942) bitbucket_pipeline_variable exposes sensitive values
  * CVE-2021-20178 (bsc#1180816) user data leak in snmp_facts module</changelog>
  <changelog author="michael@stroeder.com" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="michael@stroeder.com" date="1620129600">- update to 2.9.21</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1639483200">- Require python macros for building</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1658232000">- Update to 2.9.22:
  * CVE-2021-3447 (bsc#1183684) multiple modules expose secured values</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1658232001">- Update to version 2.9.27 (jsc#SLE-23631) (jsc#SLE-24133)
  * bsc#1187725 CVE-2021-3620 ansible-connection module discloses sensitive
    info in traceback error message (in 2.9.27)
  * bsc#1188061 CVE-2021-3583 Template Injection through yaml multi-line
    strings with ansible facts used in template. (in 2.9.23)
  * bsc#1176460 gh#ansible/ansible#72094 ansible module nmcli is broken in
    ansible 2.9.13 (in 2.9.15)</changelog>
</package>
<package pkgid="2f013b56907847da585c00cfda9a340862ba753535f3e72da2b5c4dd2bcb32ad" name="ansible" arch="src">
  <version epoch="0" ver="2.9.27" rel="150000.1.14.1"/>
  <changelog author="mcepl@suse.com" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="michael@stroeder.com" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="egdfree@opensuse.org" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="michael@stroeder.com" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="michael@stroeder.com" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="michael@stroeder.com" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="michael@stroeder.com" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="michael@stroeder.com" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="michael@stroeder.com" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes
  * CVE-2021-20228 (bsc#1181935) basic.py no_log with fallback option
  * CVE-2021-20191 (bsc#1181119) multiple collections exposes secured values
  * CVE-2021-20180 (bsc#1180942) bitbucket_pipeline_variable exposes sensitive values
  * CVE-2021-20178 (bsc#1180816) user data leak in snmp_facts module</changelog>
  <changelog author="michael@stroeder.com" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="michael@stroeder.com" date="1620129600">- update to 2.9.21</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1639483200">- Require python macros for building</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1658232000">- Update to 2.9.22:
  * CVE-2021-3447 (bsc#1183684) multiple modules expose secured values</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1658232001">- Update to version 2.9.27 (jsc#SLE-23631) (jsc#SLE-24133)
  * bsc#1187725 CVE-2021-3620 ansible-connection module discloses sensitive
    info in traceback error message (in 2.9.27)
  * bsc#1188061 CVE-2021-3583 Template Injection through yaml multi-line
    strings with ansible facts used in template. (in 2.9.23)
  * bsc#1176460 gh#ansible/ansible#72094 ansible module nmcli is broken in
    ansible 2.9.13 (in 2.9.15)</changelog>
</package>
<package pkgid="7d32c074d7a724ae180554073347e40552c8ccfbfe2a1a284723a1c94606b6f6" name="ansible-doc" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="150000.1.14.1"/>
  <changelog author="mcepl@suse.com" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="michael@stroeder.com" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="egdfree@opensuse.org" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="michael@stroeder.com" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="michael@stroeder.com" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="michael@stroeder.com" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="michael@stroeder.com" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="michael@stroeder.com" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="michael@stroeder.com" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes
  * CVE-2021-20228 (bsc#1181935) basic.py no_log with fallback option
  * CVE-2021-20191 (bsc#1181119) multiple collections exposes secured values
  * CVE-2021-20180 (bsc#1180942) bitbucket_pipeline_variable exposes sensitive values
  * CVE-2021-20178 (bsc#1180816) user data leak in snmp_facts module</changelog>
  <changelog author="michael@stroeder.com" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="michael@stroeder.com" date="1620129600">- update to 2.9.21</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1639483200">- Require python macros for building</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1658232000">- Update to 2.9.22:
  * CVE-2021-3447 (bsc#1183684) multiple modules expose secured values</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1658232001">- Update to version 2.9.27 (jsc#SLE-23631) (jsc#SLE-24133)
  * bsc#1187725 CVE-2021-3620 ansible-connection module discloses sensitive
    info in traceback error message (in 2.9.27)
  * bsc#1188061 CVE-2021-3583 Template Injection through yaml multi-line
    strings with ansible facts used in template. (in 2.9.23)
  * bsc#1176460 gh#ansible/ansible#72094 ansible module nmcli is broken in
    ansible 2.9.13 (in 2.9.15)</changelog>
</package>
<package pkgid="e4dacd270878123caca403d263ba3d20722944fc9c227097b9b4287d907d7afc" name="ansible-test" arch="noarch">
  <version epoch="0" ver="2.9.27" rel="150000.1.14.1"/>
  <changelog author="mcepl@suse.com" date="1590667200">- Correct ID of CVE and rename the patch to
  CVE-2020-1744_avoid_mkdir_p.patch</changelog>
  <changelog author="michael@stroeder.com" date="1592827200">- update to version 2.9.10 with many bug fixes.
- removed CVE-2020-1744_avoid_mkdir_p.patch obsoleted by upstream update</changelog>
  <changelog author="egdfree@opensuse.org" date="1594641600">- added ansible_bugfix_640.diff to fix gh#ansible-collections/community.general#640</changelog>
  <changelog author="michael@stroeder.com" date="1595332800">- update to version 2.9.11 with many bug fixes
- removed ansible_bugfix_640.diff obsoleted by upstream update</changelog>
  <changelog author="michael@stroeder.com" date="1597147200">- update to version 2.9.12 with many bug fixes,
  most notably the following security fixes:
  * security issue - copy - Redact the value of the no_log 'content'
    parameter in the result's invocation.module_args in check mode.
    Previously when used with check mode and with '-vvv', the module would
    not censor the content if a change would be made to the destination path.
    (CVE-2020-14332)
  * security issue atomic_move - change default permissions when creating
    temporary files so they are not world readable
    (https://github.com/ansible/ansible/issues/67794) (CVE-2020-1736)
  * Fix warning for default permission change when no mode is specified.
    Follow up to https://github.com/ansible/ansible/issues/67794.
    (CVE-2020-1736)
  * Sanitize no_log values from any response keys that might be returned
    from the uri module (CVE-2020-14330).
  * reset logging level to INFO due to CVE-2019-14846.</changelog>
  <changelog author="michael@stroeder.com" date="1597233600">- added fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1598961600">- update to version 2.9.13 with many bug fixes, most notably:
  * A security issue was addressed in the "dnf" module, which previously
    did not check GPG signatures of packages.
  * A bug in the "cron" module was fixed. In some cases prior to this
    fix, the module would inadvertently remove cron entries.
- removed obsolete fix-cron-regression-71207.patch</changelog>
  <changelog author="michael@stroeder.com" date="1601985600">- update to version 2.9.14 with many small improvements and bug fixes,
  most notably:
  * kubectl - connection plugin now redact kubectl_token and
    kubectl_password in console log (CVE-2020-1753).
- avoid trailing comments after %endif</changelog>
  <changelog author="michael@stroeder.com" date="1604404800">- update to version 2.9.15 with following breaking change:
  * ansible-galaxy login command has been removed</changelog>
  <changelog author="michael@stroeder.com" date="1608033600">- update to version 2.9.16 with minor changes and many bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1611057600">- update to version 2.9.17 with minor changes and a few bug fixes</changelog>
  <changelog author="michael@stroeder.com" date="1613736000">- update to version 2.9.18
  * CVE-2021-20228 where default and fallback values for no_log parameters
    to modules were not previously masked.
  * CVE-2021-20178 where several parameters to the snmp_facts module were
    logged and displayed despite containing sensitive information.
  * CVE-2021-20180 where several parameters to the
    bitbucket_pipeline_variable were logged and displayed despite
    containing sensitive information.
  * CVE-2021-20191 which addresses a number of modules whose parameters
    were logged and displayed despite containing sensitive
    information. For the full list of affected modules, refer to the
    changelog linked below.</changelog>
  <changelog author="michael@stroeder.com" date="1615896000">- update to version 2.9.19 with minor changes and a few bug fixes
  * CVE-2021-20228 (bsc#1181935) basic.py no_log with fallback option
  * CVE-2021-20191 (bsc#1181119) multiple collections exposes secured values
  * CVE-2021-20180 (bsc#1180942) bitbucket_pipeline_variable exposes sensitive values
  * CVE-2021-20178 (bsc#1180816) user data leak in snmp_facts module</changelog>
  <changelog author="michael@stroeder.com" date="1618315200">- update to version 2.9.20
  maintenance release containing numerous bugfixes</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574400">- Switch to python3-cryptography in openSUSE/SLE</changelog>
  <changelog author="alexander.graul@suse.com" date="1618574401">- Drop python-coverage run-time requirement from openSUSE/SLE</changelog>
  <changelog author="michael@stroeder.com" date="1620129600">- update to 2.9.21</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1639483200">- Require python macros for building</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1658232000">- Update to 2.9.22:
  * CVE-2021-3447 (bsc#1183684) multiple modules expose secured values</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1658232001">- Update to version 2.9.27 (jsc#SLE-23631) (jsc#SLE-24133)
  * bsc#1187725 CVE-2021-3620 ansible-connection module discloses sensitive
    info in traceback error message (in 2.9.27)
  * bsc#1188061 CVE-2021-3583 Template Injection through yaml multi-line
    strings with ansible facts used in template. (in 2.9.23)
  * bsc#1176460 gh#ansible/ansible#72094 ansible module nmcli is broken in
    ansible 2.9.13 (in 2.9.15)</changelog>
</package>
<package pkgid="bdb195933933d68fe04f47001cabced6ab7066d962336e9fdfa9e307b1ef5dc2" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="209a6f728459ff139aaa5deea7c4c4e25725785ce56bb2a6eb579d1e9aae37b3" name="ant" arch="src">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="f5e23bb414b97be6b667653f54a126ab2f608b1a551b86240e4bd93273e95856" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="68366a60d7748bcade62740a352ca02ad43934250f1dceae332cfb28a318c666" name="ant-antlr" arch="src">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="d8e5a91a74a39e207641450337bacab9f24a2b917856cc51e280f39efb0674f0" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="af2654682bbb8582ab1716b2ad3cf2935f1676e54f672d2619ca75d3c9d08e39" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="71c1e2c5ef14b39a49631c259385ac5603674eef45a462f46f79d7a01186b662" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="4b2760e6aa0d61b414d6a02775ede5c7340f410fd03d4867969ff3eee57de1c0" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="ea9e04369123aad228ae77fbcce3378f326778044682ab23f3146b6456714907" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="f29550da110f1e94628fc229a8cd7fa5d37db3f60b591d966f90fe400dc37af7" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="4080d4c36f41ce8932f49b433edb790a8269a6088637fce4eaabf86ede59717c" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="1b6f6cb96bb146ea204dcdecd958a9ebe275f38794d085a570f4bc4ae675e9b9" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="8677ddb10fdae4eaf2c3397afa88f1dbd3863b57aa561fdbd3f3f19aff08b1be" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="8cccccc7832a0dfd89d00ddaab52d62913c16041b403f8baac390ea7bde1e0ff" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="b17760595254b468e4c1935e99d3997aa904d39843db1e53a82e4ae4332abbe2" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="cae5586dd598a8629fe39af2dd3e9dc68c961d37180eef7f253ba740c41526d6" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="917f1a2286f6d69304e3286de30024a28d0fb3790d225cb31929634a2330e9e4" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="0c466c25d4382abfee2f6ddc433cbf7bcc08477a04501a6cccdf514c55587f5b" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="f58f06cca742b7f03fbc9782467761bd1db6ecb4b6c3cd7f09af8b2005d9eb97" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="8deaaff548a20fe85c4aca9e9dda19060987a37fa6b0a2a4f3a65c5a8c63c845" name="ant-junit" arch="src">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="5f8e7bcf63e490fe38902255da966bd5896b50ca15e23616b47d817839534fea" name="ant-junit5" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="3c3d41c558150abfb3877d608d51b29d83c5d7e1a2d8ba236898baa76edf1b3a" name="ant-junit5" arch="src">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="6a516b547ce6dd3cf12368adde5b0fb733895b193d004cafb54d63b7914cb0ad" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="27fa425f9b455fe3bf41e0b47e9a903a09dd6f60caa2e3171704c56e6a14487c" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="ee24dab757e1db0c19aa517a8f03d7baab5904c381a5af70602e1fbc481cfb93" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="349b3520f0a2a01d83873afd49c7164c1c8f1b15b952fdec7dfb5daf9e0e0c7b" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="0c4b3ecb07a7d5b2ae428b3aee356a2b4ceabe3d2a105b303584cc3ac2995efa" name="ant-xz" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="f58a77d9f9068512f8eb21846ff3a88a71d15efc7cf86d53da3a7a423725ff72" name="apache-commons-compress" arch="noarch">
  <version epoch="0" ver="1.21" rel="150200.3.7.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- 'Initial SUSE packaging from jpackage.org 5.0'</changelog>
  <changelog author="mvyskocil@suse.com" date="1354190400">- use saxon and saxon-scripts only when using maven</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build under new javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Build also the javadoc package</changelog>
  <changelog author="fstrba@suse.com" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="jengelh@inai.de" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="fstrba@suse.com" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
</package>
<package pkgid="20f8abd362828a0bbd752e5b56f47bea4df55f67dcd49f989b62a33672c400f7" name="apache-commons-compress" arch="src">
  <version epoch="0" ver="1.21" rel="150200.3.7.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- 'Initial SUSE packaging from jpackage.org 5.0'</changelog>
  <changelog author="mvyskocil@suse.com" date="1354190400">- use saxon and saxon-scripts only when using maven</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build under new javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Build also the javadoc package</changelog>
  <changelog author="fstrba@suse.com" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="jengelh@inai.de" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="fstrba@suse.com" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
</package>
<package pkgid="f0ce650460657243bac4c2f0859018c55741974d341be3d3626c5560286390ae" name="apache-commons-compress-javadoc" arch="noarch">
  <version epoch="0" ver="1.21" rel="150200.3.7.1"/>
  <changelog author="mvyskocil@suse.cz" date="1242302400">- 'Initial SUSE packaging from jpackage.org 5.0'</changelog>
  <changelog author="mvyskocil@suse.com" date="1354190400">- use saxon and saxon-scripts only when using maven</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Fix build under new javapackage-tools</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Build also the javadoc package</changelog>
  <changelog author="fstrba@suse.com" date="1548417600">- Rename package to apache-commons-compress
  * Upgrade to version 1.18
  * Use build.xml file generated ba mvn ant:ant and simplified
    manually after
    + Allows building with ant and considerably shortens build
    cycle
- Added patches
  * 0001-Remove-Brotli-compressor.patch
    + do not build Brotli compressor, since we don't have its
    dependencies
  * 0002-Remove-ZSTD-compressor.patch
    + do not build ZSTD compressor, since we don't have its
    dependencies
  * fix_java_8_compatibility.patch
    + restore Java 8 compatibility in java.nio.ByteBuffer use</changelog>
  <changelog author="jengelh@inai.de" date="1548590400">- Add missing RPM group for %name-javadoc.</changelog>
  <changelog author="fstrba@suse.com" date="1553515200">- Remove pom parent, since we don't use it when not building with
  maven</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1566993600">- Updated to 1.19 [bsc#1148475, CVE-2019-12402]
  * ZipFile could get stuck in an infinite loop when parsing ZIP archives
    with certain strong encryption headers (CVE-2019-12402).
  * ZipArchiveInputStream and ZipFile will no longer throw an exception if
    an extra field generally understood by Commons Compress is malformed
    but rather turn them into UnrecognizedExtraField instances.  You can
    influence the way extra fields are parsed in more detail by using the
    new getExtraFields(ExtraFieldParsingBehavior) method of ZipArchiveEntry now.
  * Some of the ZIP extra fields related to strong encryption will now
    throw ZipExceptions rather than ArrayIndexOutOfBoundsExceptions in
    certain cases when used directly. There is no practical difference
    when they are read via ZipArchiveInputStream or ZipFile.
  * ParallelScatterZipCreator now writes entries in the same order they have
    been added to the archive.
  * ZipArchiveInputStream and ZipFile are more forgiving when parsing extra
    fields by default now.
  * TarArchiveInputStream has a new lenient mode that may allow it to read
    certain broken archives.
- Rebased patch fix_java_8_compatibility.patch</changelog>
  <changelog author="fstrba@suse.com" date="1626782400">- Updated to 1.21
  * When reading a specially crafted 7Z archive, the construction of
    the list of codecs that decompress an entry can result in an
    infinite loop. This could be used to mount a denial of service
    attack against services that use Compress' sevenz package.
    (CVE-2021-35515, bsc#1188463)
  * When reading a specially crafted 7Z archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' sevenz package. (CVE-2021-35516, bsc#1188464)
  * When reading a specially crafted TAR archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could be
    used to mount a denial of service attack against services that
    use Compress' tar package. (CVE-2021-35517, bsc#1188465)
  * When reading a specially crafted ZIP archive, Compress can be
    made to allocate large amounts of memory that finally leads to
    an out of memory error even for very small inputs. This could
    be used to mount a denial of service attack against services
    that use Compress' zip package. (CVE-2021-36090, bsc#1188466)
- New dependency on asm3 for Pack200 compressor
- Rebased patch fix_java_8_compatibility.patch to a new context and
  added some new ocurrences</changelog>
</package>
<package pkgid="671fef5de8d2b78eb8f2e7b2dfd989a3bc6cb6b3ee16e41ce6c54ed8e6f3c348" name="apache2" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="38885faf1c8d190fe128a24d7f140e744dc393b4c1c8c419dcbf7f8c5246127b" name="apache2" arch="ppc64le">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="10e4a4b803dc7d0ca1b64f2d7a6111e3b1bc41baca54b35f9fd02a40ce6c2afd" name="apache2" arch="s390x">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="acfd528285989e276ef425d771953c58b3d22062af0c2faa7f4b48d2aea9f48c" name="apache2" arch="src">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="0732752695c00b75fa25a32bb0e84d0fafbd2de06e4acf140087a6193d7a65b4" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="19b08ac7cd32177f5975789a6b9a9dd0caa614be05b15a1694298263cb82a93f" name="apache2-devel" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="92f4bd7be88e09b2d402ccccfb0d9133aeb696aaa278be184bc8e72d7eb895cf" name="apache2-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="ef15fd52a3f062350da788107b34e794b9716d652e276c7332d2fe8b869babdb" name="apache2-devel" arch="s390x">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="90e1f37746f589b3ffcd7c811624da69af16082e9d2fb8a8fd578c8a983e68d9" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="a61d3b3b38178752126b359e3cda96311396b2c10d11fbafd3b2c6945aea660f" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="7a71104c299fcac51168885b1e8f0c58a9c14d8b3f51d06807b1fb40a7255b7e" name="apache2-event" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="661f980f4875a0820c1aca682ea511318e877157f714b869add131a111a1cc17" name="apache2-event" arch="ppc64le">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="66ebefe3047541b8c72c14ab062c6d106dec99e48553011eb6d256fb1ea18de2" name="apache2-event" arch="s390x">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="6ad67fc96a19582f2f0c1d911ea30011540f16f8bedfe96e8ca658596a9f105c" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="14e370c29ad350c2c87636d756980b6b257dad3cd50bc35687d76392acbb2d86" name="apache2-example-pages" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="bd12a209bdd798f65e1a203f1a21c5c3c6c29802cd342f18d534822119e787e4" name="apache2-example-pages" arch="ppc64le">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="870ac1ec6a81ba5ed9f376d33035fb8bb05c9e1780f8d0956bce84a9e3b9da42" name="apache2-example-pages" arch="s390x">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="8e543f42fa35ebe1752bf219f3a6efb76fc0d401e50123ace854ef51ac90fadb" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="5263b0f56fe346c3aaba8df2f11d0db09791dd1f0c5ac6184f6ae941368cbd7e" name="apache2-mod_apparmor" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="7bdc8b2fd629a02295e6eb6a1e4b1dc60f86152a000e0f4c36ac96d3effb5680" name="apache2-mod_apparmor" arch="ppc64le">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="67e4bae83f09192c0442b54c857082dd0b614997f3ab31b344f67ff6f45c7a79" name="apache2-mod_apparmor" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="7cd33d65170985cae71db18e2abb41dd0be3af3f98181db66685828f0911a8c0" name="apache2-mod_apparmor" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="545cb05cfda1f55af5ee8557a01d65d54137f55b2f42319bd4528ad9ff8427ec" name="apache2-mod_auth_mellon" arch="aarch64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="63369427456ad4caef5de5de7a2a5c458ca16843f23042b3013d984c7b6e8e4f" name="apache2-mod_auth_mellon" arch="ppc64le">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="1fad638b2be66dc647624d911e008c9fade06b40949e082b3416d172c5565d47" name="apache2-mod_auth_mellon" arch="s390x">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="a58af25c76528322c7f166fad8994bd692315ba188ea7dd8a3d1d1604ca80dcf" name="apache2-mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="b712cc8fed15b282a884d9d2dd0d987f9956c3fe7f337d670b42826d8928a003" name="apache2-mod_auth_mellon" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="5a3cde485177a716bb1edd1a3d686f9cfbebb5cc5cbf687c766da815579f27e5" name="apache2-mod_auth_mellon-diagnostics" arch="aarch64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="f449c5b37f051a5b7f0db041c96e2c7f2c50a9fcf83ee933df211dd953e5e0f0" name="apache2-mod_auth_mellon-diagnostics" arch="ppc64le">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="287e5bbb635b6dbc8be86977b31e1b26c69b7c13bae2f2c745fa1b03d235f37a" name="apache2-mod_auth_mellon-diagnostics" arch="s390x">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="880d310db3995b0a5b0731c10c77a96e2f625cf2984eb942921d33eca80cb92a" name="apache2-mod_auth_mellon-diagnostics" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="2e8a13c913be6a887195b2eb51f97062f4d97317f62dc207db684d5ff424cb14" name="apache2-mod_auth_mellon-doc" arch="aarch64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="08168788705ac25e17511261fbca5033ce9fb4e8fae3bc7148420d73d44c08d1" name="apache2-mod_auth_mellon-doc" arch="ppc64le">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="b1b02413ac3641e0e12637780711ddbc8600dab35633c2000e8f0e33c2fac53f" name="apache2-mod_auth_mellon-doc" arch="s390x">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="53f98c5ce5ddddfddc63f897931fa199ca2644fcb8a457d089dcb91a77540412" name="apache2-mod_auth_mellon-doc" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="5fced35a934249126118c89b65ca1932b468c85c68e28570b004d48a6cad0e87" name="apache2-mod_auth_openidc" arch="aarch64">
  <version epoch="0" ver="2.3.8" rel="150100.3.22.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="kstreitova@suse.com" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627041600">- Fix CVE-2021-32785 format string bug via hiredis
  (CVE-2021-32785, bsc#1188638)
  * fix-CVE-2021-32785.patch
- Fix CVE-2021-32786 open redirect in logout functionality
  (CVE-2021-32786, bsc#1188639)
  * fix-CVE-2021-32786.patch
- Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627473600">- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption
  (CVE-2021-32791, bsc#1188849)
  * fix-CVE-2021-32791.patch
- Fix CVE-2021-32792 XSS when using OIDCPreservePost On
  (CVE-2021-32792, bsc#1188848)
  * fix-CVE-2021-32792-1.patch
  * fix-CVE-2021-32792-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649851200">- Fix CVE-2021-39191 open redirect issue in target_link_uri parameter
  (CVE-2021-39191, bsc#1190223)
  * fix-CVE-2021-39191.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671796800">- Fix CVE-2022-23527, Open Redirect in oidc_validate_redirect_url() using tab character
  (CVE-2022-23527, bsc#1206441)
  * fix-CVE-2022-23527-0.patch
  * fix-CVE-2022-23527-1.patch
  * fix-CVE-2022-23527-3.patch
  * fix-CVE-2022-23527-2.patch
- Harden oidc_handle_refresh_token_request function
  * harden-refresh-token-request.patch
- Fixes bsc#1199868, mod_auth_openidc not loading</changelog>
</package>
<package pkgid="dac672e70a57527a695626983682b17c95ca2ce448716fb259950f5f9c24d7c6" name="apache2-mod_auth_openidc" arch="ppc64le">
  <version epoch="0" ver="2.3.8" rel="150100.3.22.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="kstreitova@suse.com" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627041600">- Fix CVE-2021-32785 format string bug via hiredis
  (CVE-2021-32785, bsc#1188638)
  * fix-CVE-2021-32785.patch
- Fix CVE-2021-32786 open redirect in logout functionality
  (CVE-2021-32786, bsc#1188639)
  * fix-CVE-2021-32786.patch
- Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627473600">- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption
  (CVE-2021-32791, bsc#1188849)
  * fix-CVE-2021-32791.patch
- Fix CVE-2021-32792 XSS when using OIDCPreservePost On
  (CVE-2021-32792, bsc#1188848)
  * fix-CVE-2021-32792-1.patch
  * fix-CVE-2021-32792-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649851200">- Fix CVE-2021-39191 open redirect issue in target_link_uri parameter
  (CVE-2021-39191, bsc#1190223)
  * fix-CVE-2021-39191.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671796800">- Fix CVE-2022-23527, Open Redirect in oidc_validate_redirect_url() using tab character
  (CVE-2022-23527, bsc#1206441)
  * fix-CVE-2022-23527-0.patch
  * fix-CVE-2022-23527-1.patch
  * fix-CVE-2022-23527-3.patch
  * fix-CVE-2022-23527-2.patch
- Harden oidc_handle_refresh_token_request function
  * harden-refresh-token-request.patch
- Fixes bsc#1199868, mod_auth_openidc not loading</changelog>
</package>
<package pkgid="83476a55a0518b5776b2b12c60634e4c0443b193db969b3b0014b8b72a7597f9" name="apache2-mod_auth_openidc" arch="s390x">
  <version epoch="0" ver="2.3.8" rel="150100.3.22.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="kstreitova@suse.com" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627041600">- Fix CVE-2021-32785 format string bug via hiredis
  (CVE-2021-32785, bsc#1188638)
  * fix-CVE-2021-32785.patch
- Fix CVE-2021-32786 open redirect in logout functionality
  (CVE-2021-32786, bsc#1188639)
  * fix-CVE-2021-32786.patch
- Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627473600">- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption
  (CVE-2021-32791, bsc#1188849)
  * fix-CVE-2021-32791.patch
- Fix CVE-2021-32792 XSS when using OIDCPreservePost On
  (CVE-2021-32792, bsc#1188848)
  * fix-CVE-2021-32792-1.patch
  * fix-CVE-2021-32792-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649851200">- Fix CVE-2021-39191 open redirect issue in target_link_uri parameter
  (CVE-2021-39191, bsc#1190223)
  * fix-CVE-2021-39191.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671796800">- Fix CVE-2022-23527, Open Redirect in oidc_validate_redirect_url() using tab character
  (CVE-2022-23527, bsc#1206441)
  * fix-CVE-2022-23527-0.patch
  * fix-CVE-2022-23527-1.patch
  * fix-CVE-2022-23527-3.patch
  * fix-CVE-2022-23527-2.patch
- Harden oidc_handle_refresh_token_request function
  * harden-refresh-token-request.patch
- Fixes bsc#1199868, mod_auth_openidc not loading</changelog>
</package>
<package pkgid="357f1eb4aa80d6056b130803b0bcaf3fd5fd337dbc44afb77b91c550b8d7723b" name="apache2-mod_auth_openidc" arch="src">
  <version epoch="0" ver="2.3.8" rel="150100.3.22.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="kstreitova@suse.com" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627041600">- Fix CVE-2021-32785 format string bug via hiredis
  (CVE-2021-32785, bsc#1188638)
  * fix-CVE-2021-32785.patch
- Fix CVE-2021-32786 open redirect in logout functionality
  (CVE-2021-32786, bsc#1188639)
  * fix-CVE-2021-32786.patch
- Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627473600">- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption
  (CVE-2021-32791, bsc#1188849)
  * fix-CVE-2021-32791.patch
- Fix CVE-2021-32792 XSS when using OIDCPreservePost On
  (CVE-2021-32792, bsc#1188848)
  * fix-CVE-2021-32792-1.patch
  * fix-CVE-2021-32792-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649851200">- Fix CVE-2021-39191 open redirect issue in target_link_uri parameter
  (CVE-2021-39191, bsc#1190223)
  * fix-CVE-2021-39191.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671796800">- Fix CVE-2022-23527, Open Redirect in oidc_validate_redirect_url() using tab character
  (CVE-2022-23527, bsc#1206441)
  * fix-CVE-2022-23527-0.patch
  * fix-CVE-2022-23527-1.patch
  * fix-CVE-2022-23527-3.patch
  * fix-CVE-2022-23527-2.patch
- Harden oidc_handle_refresh_token_request function
  * harden-refresh-token-request.patch
- Fixes bsc#1199868, mod_auth_openidc not loading</changelog>
</package>
<package pkgid="06e51bb227ea2ab71af4e7f8a610766c82aa903dccff1845363c1b9c36c057de" name="apache2-mod_auth_openidc" arch="x86_64">
  <version epoch="0" ver="2.3.8" rel="150100.3.22.1"/>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1513166400">- initial packaging</changelog>
  <changelog author="vcizek@suse.com" date="1524830400">- update to 2.3.4
- requested in fate#323817</changelog>
  <changelog author="kstreitova@suse.com" date="1540900800">- update to 2.3.8
- changes in 2.3.8
  * fix return result FALSE when JWT payload parsing fails
  * add LGTM code quality badges
  * fix 3 LGTM alerts
  * improve auto-detection of XMLHttpRequests via Accept header
  * initialize test_proto_authorization_request properly
  * add sanity check on provider-&gt;auth_request_method
  * allow usage with LibreSSL
  * don't return content with 503 since it will turn the HTTP
    status code into a 200
  * add option to set an upper limit to the number of concurrent
    state cookies via OIDCStateMaxNumberOfCookies
  * make the default maximum number of parallel state cookies
    7 instead of unlimited
  * fix using access token as endpoint auth method in
    introspection calls
  * fix reading access_token form POST parameters when combined
    with `AuthType auth-openidc`
- changes in 2.3.7
  * abort when string length for remote user name substitution
    is larger than 255 characters
  * fix Redis concurrency issue when used with multiple vhosts
  * add support for authorization server metadata with
    OIDCOAuthServerMetadataURL as in RFC 8414
  * refactor session object creation
  * clear session cookie and contents if cache corruption is detected
  * use apr_pstrdup when setting r-&gt;user
  * reserve 255 characters in remote username substition instead of 50
- changes in 2.3.6
  * add check to detect session cache corruption for server-based
    caches and cached static metadata
  * avoid using pipelining for Redis
  * send Basic header in OAuth www-authenticate response if that's
    the only accepted method; thanks @puiterwijk
  * refactor Redis cache backend to solve issues on AUTH errors:
    a) memory leak and b) redisGetReply lagging behind
  * adjust copyright year/org
  * fix buffer overflow in shm cache key set strcpy
  * turn missing session_state from warning into a debug statement
  * fix missing "return" on error return from the OP
  * explicitly set encryption kid so we're compatible with
    cjose &gt;= 0.6.0
- changes in 2.3.5
  * fix encoding of preserved POST data
  * avoid buffer overflow in shm cache key construction
  * compile with with Libressl</changelog>
  <changelog author="kstreitova@suse.com" date="1541764800">- submission to SLE15SP1 because of fate#324447
- build with hiredis only for openSUSE where hiredis is available
- add a version for jansson BuildRequires</changelog>
  <changelog author="kstreitova@suse.com" date="1572436800">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-14857.patch to fix
  open redirect issue that exists in URLs with trailing slashes
  [bsc#1153666], [CVE-2019-14857]</changelog>
  <changelog author="kstreitova@suse.com" date="1583323200">- add apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch to fix
  open redirect issue that exists in URLs with a slash and
  backslash at the beginning [bsc#1164459], [CVE-2019-20479]</changelog>
  <changelog author="pgajdos@suse.com" date="1617278400">- require hiredis only for newer distros than SLE-15 [jsc#SLE-11726]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627041600">- Fix CVE-2021-32785 format string bug via hiredis
  (CVE-2021-32785, bsc#1188638)
  * fix-CVE-2021-32785.patch
- Fix CVE-2021-32786 open redirect in logout functionality
  (CVE-2021-32786, bsc#1188639)
  * fix-CVE-2021-32786.patch
- Refresh apache2-mod_auth_openidc-2.3.8-CVE-2019-20479.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627473600">- Fix CVE-2021-32791 Hardcoded static IV and AAD with a reused key in AES GCM encryption
  (CVE-2021-32791, bsc#1188849)
  * fix-CVE-2021-32791.patch
- Fix CVE-2021-32792 XSS when using OIDCPreservePost On
  (CVE-2021-32792, bsc#1188848)
  * fix-CVE-2021-32792-1.patch
  * fix-CVE-2021-32792-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649851200">- Fix CVE-2021-39191 open redirect issue in target_link_uri parameter
  (CVE-2021-39191, bsc#1190223)
  * fix-CVE-2021-39191.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671796800">- Fix CVE-2022-23527, Open Redirect in oidc_validate_redirect_url() using tab character
  (CVE-2022-23527, bsc#1206441)
  * fix-CVE-2022-23527-0.patch
  * fix-CVE-2022-23527-1.patch
  * fix-CVE-2022-23527-3.patch
  * fix-CVE-2022-23527-2.patch
- Harden oidc_handle_refresh_token_request function
  * harden-refresh-token-request.patch
- Fixes bsc#1199868, mod_auth_openidc not loading</changelog>
</package>
<package pkgid="a59410f069aa0f56dd21e0d3cd0acf9b10090d268bd461e9be3e98c33baee8da" name="apache2-mod_php7" arch="aarch64">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="c0c0c1b05895b89bbc48c52e7782f1cc257d253d2787d7a640469ba627877f52" name="apache2-mod_php7" arch="ppc64le">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="ebede110ef2bc406f9033527073038f1e9cda2b817cb34190c033914b1cc3dda" name="apache2-mod_php7" arch="s390x">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="db19aed545e9c1c21be56d61f0b7dc6aa1bb5d0343c79c530a8a2d5f305d6dab" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="0a65a11e0872b2bf3a464d22fe4f20b3ab31f4d2cf61a9515bd832891acc5967" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="ac1dce1ab554c86b092344880e55358bb480f7d52161c9f0329fb4f931278d8b" name="apache2-mod_php7" arch="aarch64">
  <version epoch="0" ver="7.4.25" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="e6e8e0f809de4ba1e57c6a5f1873482e9b63ea68bb4038914fad7f7a93522594" name="apache2-mod_php7" arch="ppc64le">
  <version epoch="0" ver="7.4.25" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="a25df518e0deaa0eaf82ec380deed79cccb4ea5f073a546835a4ba965f81afc4" name="apache2-mod_php7" arch="s390x">
  <version epoch="0" ver="7.4.25" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="792fe27166eb1cf8d05653e1d7a6d6a2cd6223ed69ad7efb8b824c074a71a031" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.25" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="40a81b11a370342e4c77ba13f687a5635682b28cf1ee2f8ef8dde87e5f3abb4c" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.25" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="c68cb52cb466671e488e6d7b28381e7bb615fda877a94708463afd03d20461af" name="apache2-mod_php7" arch="aarch64">
  <version epoch="0" ver="7.4.33" rel="150400.4.13.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
</package>
<package pkgid="cdddc2eee693e435e34c5cc189576ae8012a35ff107e1efb89c4bcb33fcacf75" name="apache2-mod_php7" arch="ppc64le">
  <version epoch="0" ver="7.4.33" rel="150400.4.13.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
</package>
<package pkgid="5e031e57195b6597167f4a85c77fec75629eb121318eed482313bff9e0cc340e" name="apache2-mod_php7" arch="s390x">
  <version epoch="0" ver="7.4.33" rel="150400.4.13.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
</package>
<package pkgid="3a80734187aef578f2d15b611849d1165a2a00c368fe5080493c6c474c4e19d3" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="150400.4.13.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
</package>
<package pkgid="1eb69dd20414dffb0615c08627769036293166f4037755e5d1cae295ed6d90b7" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150400.4.13.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
</package>
<package pkgid="8df95b0544dd7daa811fa4f2f97cb91fce0c3e8220af11eb63d7837dbb64bea9" name="apache2-mod_php7" arch="aarch64">
  <version epoch="0" ver="7.4.33" rel="150400.4.16.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
</package>
<package pkgid="52bdbd11991599e1ac9b083f2546903ac369cea316651434093d6f37f1b84127" name="apache2-mod_php7" arch="ppc64le">
  <version epoch="0" ver="7.4.33" rel="150400.4.16.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
</package>
<package pkgid="0464bc8a45d3aa487cacb0bd22a01e946281fc0b7b6fe96ca3081e32da961ce7" name="apache2-mod_php7" arch="s390x">
  <version epoch="0" ver="7.4.33" rel="150400.4.16.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
</package>
<package pkgid="d61e524df9995351f0328b48f2eecc7c6ce1d7c7c2b2bbc2f32d93bcc74d445b" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.33" rel="150400.4.16.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
</package>
<package pkgid="c5a726c03fc819075d998f7db7032976327b7a162739c33cc541cab805124b1c" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.33" rel="150400.4.16.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php7-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php7-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php7-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 7.4.32 [jsc#SLE-23639]
  Version 7.4.32
  29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
  Version 7.4.30
  09 Jun 2022
    mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
  Version 7.4.29
  14 Apr 2022
    Core:
    No source changes to this release. This update allows for re-building the Windows binaries against upgraded dependencies which have received security updates.
    Date:
    Updated to latest IANA timezone database (2022a).
  Version 7.4.28
  17 Feb 2022
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints (CVE-2021-21708)
  Version 7.4.27
  16 Dec 2021
    Core:
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 7.4.26
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    MySQLi:
    Fixed bug #81494 (Stopped unbuffered query does not throw error).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    Streams:
    Fixed bug #54340 (Memory corruption with user_filter).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
- fixes [bsc#1203867] and [bsc#1203870]
- deleted patches
  - php7-CVE-2021-21707.patch (upstreamed)
  - php7-CVE-2021-21708.patch (upstreamed)
  - php7-CVE-2022-31625.patch (upstreamed)
  - php7-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1667476800">- version update to 7.4.33 [bsc#1204577][bsc#1204979]
    03 Nov 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- security update
- added patches
  fix CVE-2022-31631 [bsc#1206958], Due to an integer overflow PDO:quote() may return unquoted string
  + php7-CVE-2022-31631.patch</changelog>
</package>
<package pkgid="41d37d36de6801b0d7ca46913caef36578b94f280f50101d99d7715a45a4194f" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="e8fbaeb37e28c87bc65ccfc004f5cddedb9e24c3c4c3056d51445c6fc91e0a12" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="18985db90b0646b57b6143e93ba3526c7584f609f7fda67a3174744e65f6dcb8" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="93d5989ef20cc1976c9e2ae188928f8a4640110bff4571a08e0a24cef8310727" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="d8ab6a21880f1d7f273003110daf1dea12cbd755d3da848d289b02a51f62f629" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="bc562132a5e7e3aba2cfd7ec738dfb848b49f16f1c54a4a6ea8960190fb234df" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.10" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="9df6efafd61ddc758153531f4910905093bca96fa2cdf9cedc2daf267721f855" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.10" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="349d7aeda38dd8967f920383bd88d35c8e1bd080dcdf15a9f3d733277474588e" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.10" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="b27ade5f7e80b71f78b844ef35305dc8e5e6f790be31c58437bf6de3d7badaa2" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.10" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="2430dc09dd8a3a1cccad92cce536d78503652382ab7ef9c34a6eb2baf9f21b8c" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.10" rel="150400.4.8.1"/>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
</package>
<package pkgid="dc2ce68f0ea7e4caa3d0523d7a5a92e064036fd3a7d99b39bbd72e27dd5414fe" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.24" rel="150400.4.14.1"/>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
</package>
<package pkgid="99c2ea6dcffe4cd2743093e401e9233e2d4965a38b8c6f00583cfa29acbed55f" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.24" rel="150400.4.14.1"/>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
</package>
<package pkgid="8ab07342e9faafc6c87025a09a0d949c2eb802c6b1df7d81d62b5b835add3018" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.24" rel="150400.4.14.1"/>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
</package>
<package pkgid="c25f96c6054b659ee19ca956fd94ff7307cbd7c7fdc56adb5f2f2a07eab844dc" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.24" rel="150400.4.14.1"/>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
</package>
<package pkgid="f9011f38c3d446cd0ababa65c5cc9074ab6614e8c0d812220b63915e71708a9f" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.24" rel="150400.4.14.1"/>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
</package>
<package pkgid="a856610e31c8c8bb621281b4a135edc220c7933465a58f91b341b65302b71e9d" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.25" rel="150400.4.17.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
</package>
<package pkgid="1164a292f8567eaad7242dd58c9d6625c47e67a987687e46c80e8b420963f30a" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.25" rel="150400.4.17.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
</package>
<package pkgid="35eec3a8ffa3e8ee88eabd0a045ec2affd7a446edc5a617e0b055450befe91c8" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.25" rel="150400.4.17.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
</package>
<package pkgid="3a5bd1182dba4d80cef21c382147d782ecd5867b36b7861dbd7eea46ee68e6ee" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.25" rel="150400.4.17.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
</package>
<package pkgid="097729e85d047dd175dfef2cc88ba7b3503ff85da9adddf2976c7c7845c8c622" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.25" rel="150400.4.17.1"/>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
</package>
<package pkgid="d857cd7e52a3e0ca75be4e11592adf433325fc37b7a3f8e9eb526cbd90e34570" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.25" rel="150400.4.20.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
</package>
<package pkgid="810414906903a3b8ef10c4f38383cb2c58397d1d1d76316f7f6723045eb152b6" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.25" rel="150400.4.20.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
</package>
<package pkgid="98060d347336e3ccfb5e0f04cc5052f237e6ace7a4d52582b675e81cf3e66356" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.25" rel="150400.4.20.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
</package>
<package pkgid="7fbadc687fa8c4a2128ab78c88bfd0b8820d814026114cbaae7ce375ac304249" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.25" rel="150400.4.20.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
</package>
<package pkgid="0f3bc235d62a494fdb95ded53f29d6744c099236033b680b8302248c706afeeb" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.25" rel="150400.4.20.1"/>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
</package>
<package pkgid="f12b864f715d428f03df2c1ac72cc20f5580b72b089bf7d54c6adf88451d4afb" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.27" rel="150400.4.23.1"/>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
</package>
<package pkgid="e8e7883bcb531b9a6208961fd10f6545f03aba84a85b429ca3a244e5305d0318" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.27" rel="150400.4.23.1"/>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
</package>
<package pkgid="b69fe7331739566f5d5b7ac936b0d1720eb3b70ac5bbc14c083b95585b8885c0" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.27" rel="150400.4.23.1"/>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
</package>
<package pkgid="b805c6a726adfdc64664a483d86c2cf4c75a1abfabceaa7beb49fef7971a3e9f" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.27" rel="150400.4.23.1"/>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
</package>
<package pkgid="62c7a799cb417060b153f42f32814310c31c2f0122b0be876e5a46953c122df9" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.27" rel="150400.4.23.1"/>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __?allStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
</package>
<package pkgid="77020a4eaa247e2228448909b9c917cd0009e0b7ac1c1b9011ba8489a37a95c9" name="apache2-mod_wsgi" arch="aarch64">
  <version epoch="0" ver="4.7.1" rel="150400.3.3.1"/>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="dmueller@suse.com" date="1523016000">- update to 4.6.4:
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.19.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.20.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.21.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.22.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.23.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.24.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.0.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.1.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.2.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.3.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.4.html</changelog>
  <changelog author="dmueller@suse.com" date="1553342400">- update to 4.6.5:
  * When running mod_wsgi-express and serving up static files
  from the document root, and the WSGI application was mounted
  at a sub URL using --mount-point, the static files in the
  document root outside of the mount point for the WSGI
  application would no longer be accessible.
  * If no system mime types file can be found, fall
  back to /dev/null so that Apache can still at least
  start up.
  * Now possible to use mod_wsgi-express in an a zipapp
  created using shiv. This entailed a special workaround
  to detect when shiv was used, so that the unpacked
  site-packages directory could be added to the Python
  module search path for mod_wsgi-express.</changelog>
  <changelog author="pgajdos@suse.com" date="1575374400">- test with %apache_rex_check</changelog>
  <changelog author="pgajdos@suse.com" date="1575460800">- version update to 4.6.8
  * If no system mime types file can be found, fall back to ``/dev/null``
    so that Apache can still at least start up.
  * Fix compilation failures when using Python 3.8.
  * The Apache request ID is accessible in request events as ``request_id``.
  * The per request data dictionary accessible using ``mod_wsgi.request_data()``
    is now also accessible in events as ``request_data``.
  * When the queue timeout was triggered for requests sent to daemon mode
    processes, the error response wasn't being flushed out correctly resulting
    in the connection still being held up to the time of the socket timeout.</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="ngompa13@gmail.com" date="1586433600">- Add Python-native build so Python metadata and wrapper is present</changelog>
  <changelog author="dimstar@opensuse.org" date="1588766400">- Update to version 4.7.1:
  + Use Python 3 style print.
  + Mostly changes around distribtion from PyPi, where mod_wsgi is
    completented by a mod_wsgi-standalone with an own apache
    instance.
- Drop the python2 based package (py2 is EOL): Move the content of
  the former apache2-mod_wsgi-python3 package into apache-mod_wsgi.
  Provide/Obsolete the old -python3 package for ease of upgrade.</changelog>
  <changelog author="pgajdos@suse.com" date="1606305600">- use /usr/sbin/apxs for build, not -prefork</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="b219b685d97c860587de3bc1d1ebbf9398fc580822473fcdd28a4b3740aa8fdc" name="apache2-mod_wsgi" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="150400.3.3.1"/>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="dmueller@suse.com" date="1523016000">- update to 4.6.4:
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.19.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.20.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.21.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.22.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.23.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.24.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.0.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.1.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.2.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.3.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.4.html</changelog>
  <changelog author="dmueller@suse.com" date="1553342400">- update to 4.6.5:
  * When running mod_wsgi-express and serving up static files
  from the document root, and the WSGI application was mounted
  at a sub URL using --mount-point, the static files in the
  document root outside of the mount point for the WSGI
  application would no longer be accessible.
  * If no system mime types file can be found, fall
  back to /dev/null so that Apache can still at least
  start up.
  * Now possible to use mod_wsgi-express in an a zipapp
  created using shiv. This entailed a special workaround
  to detect when shiv was used, so that the unpacked
  site-packages directory could be added to the Python
  module search path for mod_wsgi-express.</changelog>
  <changelog author="pgajdos@suse.com" date="1575374400">- test with %apache_rex_check</changelog>
  <changelog author="pgajdos@suse.com" date="1575460800">- version update to 4.6.8
  * If no system mime types file can be found, fall back to ``/dev/null``
    so that Apache can still at least start up.
  * Fix compilation failures when using Python 3.8.
  * The Apache request ID is accessible in request events as ``request_id``.
  * The per request data dictionary accessible using ``mod_wsgi.request_data()``
    is now also accessible in events as ``request_data``.
  * When the queue timeout was triggered for requests sent to daemon mode
    processes, the error response wasn't being flushed out correctly resulting
    in the connection still being held up to the time of the socket timeout.</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="ngompa13@gmail.com" date="1586433600">- Add Python-native build so Python metadata and wrapper is present</changelog>
  <changelog author="dimstar@opensuse.org" date="1588766400">- Update to version 4.7.1:
  + Use Python 3 style print.
  + Mostly changes around distribtion from PyPi, where mod_wsgi is
    completented by a mod_wsgi-standalone with an own apache
    instance.
- Drop the python2 based package (py2 is EOL): Move the content of
  the former apache2-mod_wsgi-python3 package into apache-mod_wsgi.
  Provide/Obsolete the old -python3 package for ease of upgrade.</changelog>
  <changelog author="pgajdos@suse.com" date="1606305600">- use /usr/sbin/apxs for build, not -prefork</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="9fe21c501469f57e1d2dc44269702c397eca2f9b59a33e0a361bad83664e324c" name="apache2-mod_wsgi" arch="s390x">
  <version epoch="0" ver="4.7.1" rel="150400.3.3.1"/>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="dmueller@suse.com" date="1523016000">- update to 4.6.4:
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.19.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.20.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.21.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.22.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.23.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.24.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.0.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.1.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.2.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.3.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.4.html</changelog>
  <changelog author="dmueller@suse.com" date="1553342400">- update to 4.6.5:
  * When running mod_wsgi-express and serving up static files
  from the document root, and the WSGI application was mounted
  at a sub URL using --mount-point, the static files in the
  document root outside of the mount point for the WSGI
  application would no longer be accessible.
  * If no system mime types file can be found, fall
  back to /dev/null so that Apache can still at least
  start up.
  * Now possible to use mod_wsgi-express in an a zipapp
  created using shiv. This entailed a special workaround
  to detect when shiv was used, so that the unpacked
  site-packages directory could be added to the Python
  module search path for mod_wsgi-express.</changelog>
  <changelog author="pgajdos@suse.com" date="1575374400">- test with %apache_rex_check</changelog>
  <changelog author="pgajdos@suse.com" date="1575460800">- version update to 4.6.8
  * If no system mime types file can be found, fall back to ``/dev/null``
    so that Apache can still at least start up.
  * Fix compilation failures when using Python 3.8.
  * The Apache request ID is accessible in request events as ``request_id``.
  * The per request data dictionary accessible using ``mod_wsgi.request_data()``
    is now also accessible in events as ``request_data``.
  * When the queue timeout was triggered for requests sent to daemon mode
    processes, the error response wasn't being flushed out correctly resulting
    in the connection still being held up to the time of the socket timeout.</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="ngompa13@gmail.com" date="1586433600">- Add Python-native build so Python metadata and wrapper is present</changelog>
  <changelog author="dimstar@opensuse.org" date="1588766400">- Update to version 4.7.1:
  + Use Python 3 style print.
  + Mostly changes around distribtion from PyPi, where mod_wsgi is
    completented by a mod_wsgi-standalone with an own apache
    instance.
- Drop the python2 based package (py2 is EOL): Move the content of
  the former apache2-mod_wsgi-python3 package into apache-mod_wsgi.
  Provide/Obsolete the old -python3 package for ease of upgrade.</changelog>
  <changelog author="pgajdos@suse.com" date="1606305600">- use /usr/sbin/apxs for build, not -prefork</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="075fe439208e2704388a1353a57293a435a1fe7174ac6d7943d22b2572515aba" name="apache2-mod_wsgi" arch="src">
  <version epoch="0" ver="4.7.1" rel="150400.3.3.1"/>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="dmueller@suse.com" date="1523016000">- update to 4.6.4:
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.19.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.20.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.21.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.22.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.23.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.24.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.0.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.1.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.2.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.3.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.4.html</changelog>
  <changelog author="dmueller@suse.com" date="1553342400">- update to 4.6.5:
  * When running mod_wsgi-express and serving up static files
  from the document root, and the WSGI application was mounted
  at a sub URL using --mount-point, the static files in the
  document root outside of the mount point for the WSGI
  application would no longer be accessible.
  * If no system mime types file can be found, fall
  back to /dev/null so that Apache can still at least
  start up.
  * Now possible to use mod_wsgi-express in an a zipapp
  created using shiv. This entailed a special workaround
  to detect when shiv was used, so that the unpacked
  site-packages directory could be added to the Python
  module search path for mod_wsgi-express.</changelog>
  <changelog author="pgajdos@suse.com" date="1575374400">- test with %apache_rex_check</changelog>
  <changelog author="pgajdos@suse.com" date="1575460800">- version update to 4.6.8
  * If no system mime types file can be found, fall back to ``/dev/null``
    so that Apache can still at least start up.
  * Fix compilation failures when using Python 3.8.
  * The Apache request ID is accessible in request events as ``request_id``.
  * The per request data dictionary accessible using ``mod_wsgi.request_data()``
    is now also accessible in events as ``request_data``.
  * When the queue timeout was triggered for requests sent to daemon mode
    processes, the error response wasn't being flushed out correctly resulting
    in the connection still being held up to the time of the socket timeout.</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="ngompa13@gmail.com" date="1586433600">- Add Python-native build so Python metadata and wrapper is present</changelog>
  <changelog author="dimstar@opensuse.org" date="1588766400">- Update to version 4.7.1:
  + Use Python 3 style print.
  + Mostly changes around distribtion from PyPi, where mod_wsgi is
    completented by a mod_wsgi-standalone with an own apache
    instance.
- Drop the python2 based package (py2 is EOL): Move the content of
  the former apache2-mod_wsgi-python3 package into apache-mod_wsgi.
  Provide/Obsolete the old -python3 package for ease of upgrade.</changelog>
  <changelog author="pgajdos@suse.com" date="1606305600">- use /usr/sbin/apxs for build, not -prefork</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="1c15c439ee7df2cd0d7645ec5585cab01f468e110c3125fa06e233b1022dc9ca" name="apache2-mod_wsgi" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="150400.3.3.1"/>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="dmueller@suse.com" date="1523016000">- update to 4.6.4:
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.19.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.20.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.21.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.22.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.23.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.5.24.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.0.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.1.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.2.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.3.html
  * see http://modwsgi.readthedocs.io/en/develop/release-notes/version-4.6.4.html</changelog>
  <changelog author="dmueller@suse.com" date="1553342400">- update to 4.6.5:
  * When running mod_wsgi-express and serving up static files
  from the document root, and the WSGI application was mounted
  at a sub URL using --mount-point, the static files in the
  document root outside of the mount point for the WSGI
  application would no longer be accessible.
  * If no system mime types file can be found, fall
  back to /dev/null so that Apache can still at least
  start up.
  * Now possible to use mod_wsgi-express in an a zipapp
  created using shiv. This entailed a special workaround
  to detect when shiv was used, so that the unpacked
  site-packages directory could be added to the Python
  module search path for mod_wsgi-express.</changelog>
  <changelog author="pgajdos@suse.com" date="1575374400">- test with %apache_rex_check</changelog>
  <changelog author="pgajdos@suse.com" date="1575460800">- version update to 4.6.8
  * If no system mime types file can be found, fall back to ``/dev/null``
    so that Apache can still at least start up.
  * Fix compilation failures when using Python 3.8.
  * The Apache request ID is accessible in request events as ``request_id``.
  * The per request data dictionary accessible using ``mod_wsgi.request_data()``
    is now also accessible in events as ``request_data``.
  * When the queue timeout was triggered for requests sent to daemon mode
    processes, the error response wasn't being flushed out correctly resulting
    in the connection still being held up to the time of the socket timeout.</changelog>
  <changelog author="pgajdos@suse.com" date="1581336000">- add %apache_rex_deps</changelog>
  <changelog author="ngompa13@gmail.com" date="1586433600">- Add Python-native build so Python metadata and wrapper is present</changelog>
  <changelog author="dimstar@opensuse.org" date="1588766400">- Update to version 4.7.1:
  + Use Python 3 style print.
  + Mostly changes around distribtion from PyPi, where mod_wsgi is
    completented by a mod_wsgi-standalone with an own apache
    instance.
- Drop the python2 based package (py2 is EOL): Move the content of
  the former apache2-mod_wsgi-python3 package into apache-mod_wsgi.
  Provide/Obsolete the old -python3 package for ease of upgrade.</changelog>
  <changelog author="pgajdos@suse.com" date="1606305600">- use /usr/sbin/apxs for build, not -prefork</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="1da09fa66fdc8839385ac50683bd3dd3fefb51ebb683a26459a88ac2539e3f3d" name="apache2-mod_wsgi-python3" arch="aarch64">
  <version epoch="0" ver="4.5.18" rel="150000.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="egotthold@suse.com" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="b795b00ae6f9971030850091739e660f937689d5ee5302267a94af4dae152074" name="apache2-mod_wsgi-python3" arch="ppc64le">
  <version epoch="0" ver="4.5.18" rel="150000.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="egotthold@suse.com" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="be085228f32f7c39b7ac365bfa3b1871b55cf7e1f138937559b4d3c2cfc4f26e" name="apache2-mod_wsgi-python3" arch="s390x">
  <version epoch="0" ver="4.5.18" rel="150000.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="egotthold@suse.com" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="da6c42adf8a3e22ea342fa523836185064d403313b7e8fdb5cc80b515e18edec" name="apache2-mod_wsgi-python3" arch="src">
  <version epoch="0" ver="4.5.18" rel="150000.4.6.1"/>
  <changelog author="agraf@suse.com" date="1385812800">- Add patch "mod_wsgi-3.4-connsbh.patch" to fix segmentation faults
  with apache 2.4 (https://bugzilla.redhat.com/show_bug.cgi?id=831701)</changelog>
  <changelog author="adaugherity@tamu.edu" date="1398686400">- Fix module name sent to a2enmod/a2dismod and fix/cleanup
  post/postun scripts.</changelog>
  <changelog author="mc@suse.com" date="1400932800">- fix Local privilege escalation (bnc#878550)
  CVE-2014-0240</changelog>
  <changelog author="mc@suse.de" date="1404907200">- Update to version 4.2.5
  - remove mod_wsgi-3.4-connsbh.patch - included in upstream version
  - remove mod_wsgi-setuid-patch.diff - included in upstream version
  - No longer support the use of mod_python in conjunction with
    mod_wsgi
  - Adding a lot of new configuration option
  - fix off-by-one error in setgroups (bnc#883229)</changelog>
  <changelog author="mc@suse.de" date="1404907201">- provide short module name</changelog>
  <changelog author="mc@suse.de" date="1404993600">- change URL to new location</changelog>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="egotthold@suse.com" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="f426334352f13c93b39068217187b1a28290054d6b600891d7b768769f952811" name="apache2-mod_wsgi-python3" arch="x86_64">
  <version epoch="0" ver="4.5.18" rel="150000.4.6.1"/>
  <changelog author="pgajdos@suse.com" date="1415016000">- call spec-cleaner
- use apache rpm macros</changelog>
  <changelog author="rjschwei@suse.com" date="1422532800">- Update to version 4.4.6
  - Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.6.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.5.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.4.html
    .....
  - As of version 4.2.7 mod_wsgi is effected by
    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758035</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Fix build failure on SLE 12 (Apache 2.4.10)
  + add wsgi_fixVersionCheck.patch
  + build failed due to improper version check</changelog>
  <changelog author="pgajdos@suse.com" date="1437048000">- Requries: %{apache_suse_maintenance_mmn}
  This will pull this module to the update (in released distribution)
  when apache maintainer thinks it is good (due api/abi changes).</changelog>
  <changelog author="mc@suse.com" date="1438862400">- Build subpackage with mod_wsgi_python3 (bsc#939717)</changelog>
  <changelog author="mc@suse.de" date="1439640000">- update to 4.4.8
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.7.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.8.html
- seperate package for python3 to fix module loading errors
- conflict with mod_wsgi-python3</changelog>
  <changelog author="pgajdos@suse.com" date="1441108800">- test module with %apache_test_module_load</changelog>
  <changelog author="mc@suse.de" date="1443441600">- update to 4.4.13
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.13.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.12.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.11.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.10.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.9.html</changelog>
  <changelog author="bruno@ioda-net.ch" date="1455969600">- update to 4.4.22
  * Upstream release notes:
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.22.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.21.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.20.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.19.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.18.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.17.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.16.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.15.html
    + http://modwsgi.readthedocs.org/en/latest/release-notes/version-4.4.14.html</changelog>
  <changelog author="mrueckert@suse.de" date="1464955200">- update to 4.5.2
  * Upstream release notes:
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.2.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.1.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.5.0.html
    + http://modwsgi.readthedocs.io/en/latest/release-notes/version-4.4.23.html
- minimized delta between spec files
- use the #/ trick for the source url</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505563200">- update to 4.5.18 see full changes bugfix and new features here:
  http://modwsgi.readthedocs.io/en/latest/release-notes
- specleanup</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- Fix description (bsc#1084882)</changelog>
  <changelog author="egotthold@suse.com" date="1629115200">- Enable installation of Python sitelib wrapper
  This enabled Python Projects to require mod_wsgi in the install_requires
  without receiving a "DistributionNotFound" error on entrypoint script
  generated by setuptools
- Backport of https://build.opensuse.org/request/show/794038
- Fixes bsc#1189467</changelog>
  <changelog author="mmachova@suse.com" date="1664193600">- Add CVE-2022-2255.patch (bsc#1201634)</changelog>
</package>
<package pkgid="30c23850c7a2defd0e34e3eb12a716036968ddccdad63c6495112cb011c43f80" name="apache2-prefork" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="c3f7b2987de079e007f6e7f4c54f33c16300879f0ddc8f4a982c8815691567b7" name="apache2-prefork" arch="ppc64le">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="7075e163d2f47cd4f2f69a05434d77535df3cabad2e3713f052385ed90bb9d64" name="apache2-prefork" arch="s390x">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="c7ca41e57680aeb9160fc2a19f20fc8572d9f34a74babd842ae3ff07959b5ce7" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="c1ed86a08d1073c00c0694d536cfc09d06fecdb7ab49e35ff1e2b1a3552467e0" name="apache2-utils" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="9370dfbbbc124ab4f88933a1dfcde02ee54c4950bdd9187d61a4951b3d347a04" name="apache2-utils" arch="ppc64le">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="2de802d2f530a64da6c18c4a106f9898de9e3f34a8c764c25bd07b9f37766e46" name="apache2-utils" arch="s390x">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="00fd13c4a82e0ed99aac3cfc4283e91ceb62adee20b795eb468ea1580c10dc9a" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="a91d0086e2a33ed41f0633e6d27339521a33f5f7d39058c77928e902d173b8aa" name="apache2-worker" arch="aarch64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="2bc72829888e3102f0a54a2669edad83e27670b2c6366dba2b96256856a8e86c" name="apache2-worker" arch="ppc64le">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="c5ecd2306f11b3aacfa59e1ea59aabfe5bb8e68527794639b2a936f4db68883f" name="apache2-worker" arch="s390x">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="6539d781fe4160b77eb08a4c9efa53b557f0e12efc0c875a783492013ced0167" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.51" rel="150400.6.3.1"/>
  <changelog author="pgajdos@suse.com" date="1585828800">- version update to 2.4.43
  * ) mod_ssl: Fix memory leak of OCSP stapling response. [Yann Ylavic]
  * ) mod_proxy_http: Fix the forwarding of requests with content body when a
    balancer member is unavailable; the retry on the next member was issued
    with an empty body (regression introduced in 2.4.41). PR63891.
    [Yann Ylavic]
  * ) mod_http2: Fixes issue where mod_unique_id would generate non-unique request
    identifier under load, see &lt;https://github.com/icing/mod_h2/issues/195&gt;.
    [Michael Kaufmann, Stefan Eissing]
  * ) mod_proxy_hcheck: Allow healthcheck expressions to use %{Content-Type}.
    PR64140. [Renier Velazco &lt;renier.velazco upr.edu&gt;]
  * ) mod_authz_groupfile: Drop AH01666 from loglevel "error" to "info".
    PR64172.
  * ) mod_usertrack: Add CookieSameSite, CookieHTTPOnly, and CookieSecure
    to allow customization of the usertrack cookie. PR64077.
    [Prashant Keshvani &lt;prashant2400 gmail.com&gt;, Eric Covener]
  * ) mod_proxy_ajp: Add "secret" parameter to proxy workers to implement legacy
    AJP13 authentication.  PR 53098. [Dmitry A. Bakshaev &lt;dab1818 gmail com&gt;]
  * ) mpm_event: avoid possible KeepAliveTimeout off by -100 ms.
    [Eric Covener, Yann Ylavic]
  * ) Add a config layout for OpenWRT. [Graham Leggett]
  * ) Add support for cross compiling to apxs. If apxs is being executed from
    somewhere other than its target location, add that prefix to includes and
    library directories. Without this, apxs would fail to find config_vars.mk
    and exit. [Graham Leggett]
  * ) mod_ssl: Disable client verification on ACME ALPN challenges. Fixes github
    issue mod_md#172 (https://github.com/icing/mod_md/issues/172).
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Stefan Eissing]
  * ) mod_ssl: use OPENSSL_init_ssl() to initialise OpenSSL on versions 1.1+.
    [Graham Leggett]
  * ) mod_ssl: Support use of private keys and certificates from an
    OpenSSL ENGINE via PKCS#11 URIs in SSLCertificateFile/KeyFile.
    [Anderson Sasaki &lt;ansasaki redhat.com&gt;, Joe Orton]
  * ) mod_md:
  - Prefer MDContactEmail directive to ServerAdmin for registration. New directive
    thanks to Timothe Litt (@tlhackque).
  - protocol check for pre-configured "tls-alpn-01" challenge has been improved. It will now
    check all matching virtual hosts for protocol support. Thanks to @mkauf.
  - Corrected a check when OCSP stapling was configured for hosts
    where the responsible MDomain is not clear, by Michal Karm Babacek (@Karm).
  - Softening the restrictions where mod_md configuration directives may appear. This should
    allow for use in &lt;If&gt; and &lt;Macro&gt; sections. If all possible variations lead to the configuration
    you wanted in the first place, is another matter.
    [Michael Kaufmann &lt;mail michael-kaufmann.ch&gt;, Timothe Litt (@tlhackque),
    Michal Karm Babacek (@Karm), Stefan Eissing (@icing)]
  * ) test: Added continuous testing with Travis CI.
    This tests various scenarios on Ubuntu with the full test suite.
    Architectures tested: amd64, s390x, ppc64le, arm64
    The tests pass successfully.
    [Luca Toscano, Joe Orton, Mike Rumph, and others]
  * ) core: Be stricter in parsing of Transfer-Encoding headers.
    [ZeddYu &lt;zeddyu.lu gmail.com&gt;, Eric Covener]
  * ) mod_ssl: negotiate the TLS protocol version per name based vhost
    configuration, when linked with OpenSSL-1.1.1 or later. The base vhost's
    SSLProtocol (from the first vhost declared on the IP:port) is now only
    relevant if no SSLProtocol is declared for the vhost or globally,
    otherwise the vhost or global value apply.  [Yann Ylavic]
  * ) mod_cgi, mod_cgid: Fix a memory leak in some error cases with large script
    output.  PR 64096.  [Joe Orton]
  * ) config: Speed up graceful restarts by using pre-hashed command table. PR 64066.
    [Giovanni Bechis &lt;giovanni paclan.it&gt;, Jim Jagielski]
  * ) mod_systemd: New module providing integration with systemd.  [Jan Kaluza]
  * ) mod_lua: Add r:headers_in_table, r:headers_out_table, r:err_headers_out_table,
    r:notes_table, r:subprocess_env_table as read-only native table alternatives
    that can be iterated over. [Eric Covener]
  * ) mod_http2: Fixed rare cases where a h2 worker could deadlock the main connection.
    [Yann Ylavic, Stefan Eissing]
  * ) mod_lua: Accept nil assignments to the exposed tables (r.subprocess_env,
    r.headers_out, etc) to remove the key from the table. PR63971.
    [Eric Covener]
  * ) mod_http2: Fixed interaction with mod_reqtimeout. A loaded mod_http2 was disabling the
    ssl handshake timeouts. Also, fixed a mistake of the last version that made `H2Direct`
    always `on`, regardless of configuration. Found and reported by
    &lt;Armin.Abfalterer@united-security-providers.ch&gt; and
    &lt;Marcial.Rion@united-security-providers.ch&gt;. [Stefan Eissing]
  * ) mod_http2: Multiple field length violations in the same request no longer cause
    several log entries to be written. [@mkauf]
  * ) mod_ssl: OCSP does not apply to proxy mode.  PR 63679.
    [Lubos Uhliarik &lt;luhliari redhat.com&gt;, Yann Ylavic]
  * ) mod_proxy_html, mod_xml2enc: Fix build issues with macOS due to r1864469
    [Jim Jagielski]
  * ) mod_authn_socache: Increase the maximum length of strings that can be cached by
    the module from 100 to 256.  PR 62149 [&lt;thorsten.meinl knime.com&gt;]
  * ) mod_proxy: Fix crash by resolving pool concurrency problems. PR 63503
    [Ruediger Pluem, Eric Covener]
  * ) core: On Windows, fix a start-up crash if &lt;IfFile ...&gt; is used with a path that is not
    valid (For example, testing for a file on a flash drive that is not mounted)
    [Christophe Jaillet]
  * ) mod_deflate, mod_brotli: honor "Accept-Encoding: foo;q=0" as per RFC 7231; which
    means 'foo' is "not acceptable".  PR 58158 [Chistophe Jaillet]
  * ) mod_md v2.2.3:
  - Configuring MDCAChallenges replaces any previous existing challenge configuration. It
    had been additive before which was not the intended behaviour. [@mkauf]
  - Fixing order of ACME challenges used when nothing else configured. Code now behaves as
    documented for `MDCAChallenges`. Fixes #156. Thanks again to @mkauf for finding this.
  - Fixing a potential, low memory null pointer dereference [thanks to @uhliarik].
  - Fixing an incompatibility with a change in libcurl v7.66.0 that added unwanted
    "transfer-encoding" to POST requests. This failed in directy communication with
    Let's Encrypt boulder server. Thanks to @mkauf for finding and fixing. [Stefan Eissing]
  * ) mod_md: Adding the several new features.
    The module offers an implementation of OCSP Stapling that can replace fully or
    for a limited set of domains the existing one from mod_ssl. OCSP handling
    is part of mod_md's monitoring and message notifications. If can be used
    for sites that do not have ACME certificates.
    The url for a CTLog Monitor can be configured. It is used in the server-status
    to link to the external status page of a certicate.
    The MDMessageCmd is called with argument "installed" when a new certificate
    has been activated on server restart/reload. This allows for processing of
    the new certificate, for example to applications that require it in different
    locations or formats.
    [Stefan Eissing]
  * ) mod_proxy_balancer: Fix case-sensitive referer check related to CSRF/XSS
    protection. PR 63688. [Armin Abfalterer &lt;a.abfalterer gmail.com&gt;]
- deleted patches
  - apache2-load-private-keys-from-pkcs11.patch (upstreamed)
  - httpd-2.4.3-mod_systemd.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1585915200">- declare ap_sock_disable_nagle to fix loading mod_proxy_http2
  (thanks to mliska@suse.com)
- modified patches
  % httpd-visibility.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1594814400">- fix crash in mod_proxy_uwsgi for empty values of environment
  variables [bsc#1174052]
- added patches
  fix https://svn.apache.org/viewvc?view=revision
  + apache2-mod_proxy_uwsgi-fix-crash.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1597147200">- security update
- added patches
  fix CVE-2020-11984 [bsc#1175074], mod_proxy_uwsgi info disclosure and possible RCE
  + apache2-CVE-2020-11984.patch
  fix CVE-2020-11993 [bsc#1175070], CVE-2020-9490 [bsc#1175071]
  + apache2-mod_http2-1.15.14.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1598875200">- gensslcert: add -a argument to override default SAN value</changelog>
  <changelog author="fbui@suse.com" date="1602676800">- systemd-ask-password is located in /usr/bin</changelog>
  <changelog author="pgajdos@suse.com" date="1610452800">- gensslcert sets CA:TRUE in basic constrains of CA cert [bsc#1180530]
- modified sources
  % gensslcert</changelog>
  <changelog author="pgajdos@suse.com" date="1623153600">- security update
- added patches
  fix CVE-2020-35452 [bsc#1186922], Single zero byte stack overflow in mod_auth_digest
  + apache2-CVE-2020-35452.patch
  fix CVE-2021-26690 [bsc#1186923], mod_session NULL pointer dereference in parser
  + apache2-CVE-2021-26690.patch
  fix CVE-2021-26691 [bsc#1187017], Heap overflow in mod_session
  + apache2-CVE-2021-26691.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240000">- security update
- added patches
  fix CVE-2020-13950 [bsc#1187040], mod_proxy NULL pointer dereference
  + apache2-CVE-2020-13950.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623240001">- security update
- added patches
  fix CVE-2021-31618 [bsc#1186924], NULL pointer dereference on specially crafted HTTP/2 request
  + apache2-CVE-2021-31618.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1623412800">- security update
- added patches
  fix CVE-2021-30641 [bsc#1187174], MergeSlashes regression
  + apache2-CVE-2021-30641.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1628856000">- security update
- added patches
  fix CVE-2021-33193 [bsc#1189387], Request splitting via HTTP/2 method injection and mod_proxy
  + apache2-CVE-2021-33193.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631275200">- version update to 2.4.50
  * fixes CVE-2020-11984, CVE-2020-13950, CVE-2020-35452,
    CVE-2021-26690, CVE-2021-26691, CVE-2021-30641,
    CVE-2021-31618, CVE-2021-33193, CVE-2021-34798,
    CVE-2021-36160, CVE-2021-39275, CVE-2021-40438
  * see CHANGES for more details
- deleted patches
  - apache2-CVE-2020-11984.patch (upstreamed)
  - apache2-CVE-2020-13950.patch (upstreamed)
  - apache2-CVE-2020-35452.patch (upstreamed)
  - apache2-CVE-2021-26690.patch (upstreamed)
  - apache2-CVE-2021-26691.patch (upstreamed)
  - apache2-CVE-2021-30641.patch (upstreamed)
  - apache2-CVE-2021-31618.patch (upstreamed)
  - apache2-CVE-2021-33193.patch (upstreamed)
  - apache2-mod_proxy_uwsgi-fix-crash.patch (upstreamed)
  - apache2-mod_http2-1.15.14.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1636372800">- version update to 2.4.51
  * ) core: Add ap_unescape_url_ex() for better decoding control, and deprecate
    unused AP_NORMALIZE_DROP_PARAMETERS flag.
    [Yann Ylavic, Ruediger Pluem, Stefan Eissing, Joe Orton]</changelog>
  <changelog author="pgajdos@suse.com" date="1643284800">- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of
  DEFAULT_SUSE [jsc#SLE-22561]
- set also SSLProxyCipherSuite to PROFILE=SYSTEM
- modified sources
  % apache2-ssl-global.conf</changelog>
  <changelog author="pgajdos@suse.com" date="1646222400">- security update
- added patches
  fix CVE-2021-44224 [bsc#1193943], NULL dereference or SSRF in forward proxy configurations
  + apache2-CVE-2021-44224.patch
  fix CVE-2021-44790 [bsc#1193942], buffer overflow when parsing multipart content in mod_lua
  + apache2-CVE-2021-44790.patch</changelog>
  <changelog author="david.anes@suse.com" date="1647432000">- security update
- added patches
  fix CVE-2022-23943 [bsc#1197098], heap out-of-bounds write in mod_sed
  + apache2-CVE-2022-23943.patch
  fix CVE-2022-22720 [bsc#1197095], HTTP request smuggling due to incorrect error handling
  + apache2-CVE-2022-22720.patch
  fix CVE-2022-22719 [bsc#1197091], use of uninitialized value of in r:parsebody in mod_lua
  + apache2-CVE-2022-22719.patch
  fix CVE-2022-22721 [bsc#1197096], possible buffer overflow with very large or unlimited LimitXMLRequestBody
  + apache2-CVE-2022-22721.patch
- apply correctly patches for CVE-2021-44790 [bsc#1193942] and CVE-2021-44224 [bsc#1193943]</changelog>
  <changelog author="pgajdos@suse.com" date="1647518400">- security update
- modified patches
  % apache2-CVE-2022-23943.patch (extended by r1898772 [bsc#1197095c#10])</changelog>
  <changelog author="david.anes@suse.com" date="1651752000">- fix gensslcert to generate dhparams certificate using a valid
  FIPS method [bsc#1198913]</changelog>
  <changelog author="david.anes@suse.com" date="1654862400">- security update
- added patches:
  fix CVE-2022-26377 [bsc#1200338], possible request smuggling in mod_proxy_ajp
  + apache2-CVE-2022-26377.patch
  fix CVE-2022-28614 [bsc#1200340], read beyond bounds via ap_rwrite()
  + apache2-CVE-2022-28614.patch
  fix CVE-2022-28615 [bsc#1200341], read beyond bounds in ap_strcmp_match()
  + apache2-CVE-2022-28615.patch
  fix CVE-2022-29404 [bsc#1200345], denial of service in mod_lua r:parsebody
  + apache2-CVE-2022-29404.patch
  fix CVE-2022-30556 [bsc#1200350], information disclosure in mod_lua with websockets
  + apache2-CVE-2022-30556.patch
  fix CVE-2022-30522 [bsc#1200352], mod_sed denial of service
  + apache2-CVE-2022-30522.patch
  fix CVE-2022-31813 [bsc#1200348], mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
  + apache2-CVE-2022-31813.patch</changelog>
</package>
<package pkgid="3846533a29889a340b165a85625eb3a73987faee93daf917d7f764d74cbc554e" name="apparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="50c74038afef1d8460bc2a65de223ffe5f53979737684bc009dc12763d5e5ea3" name="apparmor-abstractions" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="c3f4f97c6eca5ecfe562efb365a3cee866245706190a522ac0ff28c004ec45b2" name="apparmor-docs" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="cf9e3e6a5c45be854d9884b2501eadd054dc11dd47a301a7454c24c20f81d3a4" name="apparmor-parser" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="ce7e37d23e6877f9544a6698889be7a57f4b83a4cfe26b7aa555a88dd1f9c059" name="apparmor-parser" arch="ppc64le">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="0ef0e859dd787eb9db1a8a798efabd4e419d08e19598d86abf426ad7b437364f" name="apparmor-parser" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="6655f62ef92a1f9e4f909034d9120d7c43043c5fa3abe14bda0b684503d5c0d6" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="796063c2b663087acc2a62cbe9ee319f5d807e8d53f3ba3e33db435b118171f0" name="apparmor-parser-lang" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="a8c69a71466ddf2e1325729702101c5c0010f6177d501e2843003d2ed9e18cbb" name="apparmor-profiles" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="88238fc49058529f2bd1a5e8fe01aa9de0f73e436039907418fb9ffe9e3417f2" name="apparmor-utils" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="3f2b2e6ee1e798a412e2c109ad31e2f6e08055dc263d79e558dec36807e04078" name="apparmor-utils-lang" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150400.5.3.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628251200">- update to AppArmor 3.0.2
  - add missing permissions to several profiles and abstractions
    (including boo#1188296)
  - bugfixes in utils and parser (including boo#1180766 and boo#1184779)
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.2
    for the detailed upstream changelog
- remove upstreamed patches:
  - apparmor-dovecot-stats-metrics.diff
  - abstractions-php8.diff
  - crypto-policies-mr720.diff</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
</package>
<package pkgid="b963a4625a80fd1963b236311c38de948ab71dc0838973bc6f81e12b3976fb7d" name="at" arch="aarch64">
  <version epoch="0" ver="3.2.2" rel="150400.4.3.10"/>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Cleanup with spec-cleaner
- Remove systemd conditional (we do not work on sle11 anyway)</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Version bump to 3.1.16 to match latest upstream:
  * Fix regression for sec-fix in bash we applied in form of patch
    till now - deleting at-3.1.15-sane-envkeys.patch
- Sync/split features to be patch specific, modifying:
  * at-3.1.13-pam.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1444737600">- add at-3.1.16-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Version update to at 3.1.20 to match latest upstream:
  * Pam and selinux implemented upstream
  * various tiny fixes
- Rebase patches:
  * at-3.1.13-documentation-dir.patch
  * at-3.1.13-massive_batch.patch
  * at-3.1.14-joblist.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-usePOSIXtimers.patch
  * at-3.1.14.patch
- Drop no longer needed patches:
  * at-3.1.13-formatbugs.patch
  * at-3.1.13-pam-session-as-root.patch
  * at-3.1.13-pam.patch
  * at-3.1.13-queue-nice-level.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500724801">- Drop patch at-3.1.8-eal3-manpages.patch merged upstream differently</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1540296000">- Version update to at 3.1.23 [bsc#1112660]
  * 832368-Using_of_the_meaningless_fcntl: Fix call of fcntl by
    replacing (long) 1 with FD_CLOEXEC
  * 892819-at__improvements_to_atd.service: Improve atd.service,
    see bug report 892819
  * 885891-at__stale_batchjobs_after_reboot: Remove stale at jobs
    after a boot.
  * 897669-897670-Some_fixes_in_the_manuals: Fix some warnings in
    manpages at.1 and atd.8
  * 883730-Remove_invalid_email_from_man_page: Remove invalid email
    from man pages.
  * Draft of a release script
  * Finalised script to release software.
- refresh at-atq-timeformat.patch
- refresh at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- atd.pamd: integrate pam_keyinit pam module [bsc#1144041]</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="kstreitova@suse.com" date="1582113600">- change login shell for at user from /bin/bash to /bin/false as it
  shouldn't need a valid login shell</changelog>
  <changelog author="jengelh@inai.de" date="1601640000">- Update to release 3.2.1
  * Print time of new job before the input of the commands.
  * Do not drop seconds on -t option.
  * Start using nice levels from 0 instead of 2.
  * Correctly handle DST when specifying a UTC time.
- Modernize specfile constructs / drop old ones.
- Do not silence errors from useradd/groupadd.
- Refreshed at-3.1.13-documentation-dir.patch,
  at-3.1.13-leak-fix.patch, at-3.1.13-massive_batch.patch,
  at-3.1.13-tomorrow.patch, at-3.1.14-joblist.patch,
  at-3.1.14-makefile-deps.patch,
  at-3.1.14-parse-suse-sysconfig.patch, at-3.1.14.patch,
  at-3.1.8-denylist.patch, at-3.1.8-jobdir-mtime.patch,
  at-atq-timeformat.patch, at-backport-old-privs.patch,
  at-piddir.patch, at-secure_getenv.patch for %autosetup.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626436800">- Update to 3.2.2:
  * Add script batch-job
- Refresh patch at-3.1.14.patch into at-3.2.2.patch
- Convert at-3.1.14-parse-suse-sysconfig.patch to UTF-8</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atd.service.patch
  Modified:
  * atd.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- Tumbleweed is not affected by the following SLE issues:
  * jsc#SLE-17611
  * bsc#1181576</changelog>
  <changelog author="jsegitz@suse.com" date="1637668800">- Drop ProtectSystem and ProtectHome hardening. Unfortunately they're
  breaking at jobs (boo#1192294)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645531200">- Drop systemd hardening as it breaks some jobs, fixes bsc#1196219
  * Remove harden_atd.service.patch</changelog>
</package>
<package pkgid="047cc00f362d678a2c978ded92c3aa9abbb88edb077d3e2f8c981419e17bb20d" name="at" arch="ppc64le">
  <version epoch="0" ver="3.2.2" rel="150400.4.3.10"/>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Cleanup with spec-cleaner
- Remove systemd conditional (we do not work on sle11 anyway)</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Version bump to 3.1.16 to match latest upstream:
  * Fix regression for sec-fix in bash we applied in form of patch
    till now - deleting at-3.1.15-sane-envkeys.patch
- Sync/split features to be patch specific, modifying:
  * at-3.1.13-pam.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1444737600">- add at-3.1.16-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Version update to at 3.1.20 to match latest upstream:
  * Pam and selinux implemented upstream
  * various tiny fixes
- Rebase patches:
  * at-3.1.13-documentation-dir.patch
  * at-3.1.13-massive_batch.patch
  * at-3.1.14-joblist.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-usePOSIXtimers.patch
  * at-3.1.14.patch
- Drop no longer needed patches:
  * at-3.1.13-formatbugs.patch
  * at-3.1.13-pam-session-as-root.patch
  * at-3.1.13-pam.patch
  * at-3.1.13-queue-nice-level.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500724801">- Drop patch at-3.1.8-eal3-manpages.patch merged upstream differently</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1540296000">- Version update to at 3.1.23 [bsc#1112660]
  * 832368-Using_of_the_meaningless_fcntl: Fix call of fcntl by
    replacing (long) 1 with FD_CLOEXEC
  * 892819-at__improvements_to_atd.service: Improve atd.service,
    see bug report 892819
  * 885891-at__stale_batchjobs_after_reboot: Remove stale at jobs
    after a boot.
  * 897669-897670-Some_fixes_in_the_manuals: Fix some warnings in
    manpages at.1 and atd.8
  * 883730-Remove_invalid_email_from_man_page: Remove invalid email
    from man pages.
  * Draft of a release script
  * Finalised script to release software.
- refresh at-atq-timeformat.patch
- refresh at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- atd.pamd: integrate pam_keyinit pam module [bsc#1144041]</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="kstreitova@suse.com" date="1582113600">- change login shell for at user from /bin/bash to /bin/false as it
  shouldn't need a valid login shell</changelog>
  <changelog author="jengelh@inai.de" date="1601640000">- Update to release 3.2.1
  * Print time of new job before the input of the commands.
  * Do not drop seconds on -t option.
  * Start using nice levels from 0 instead of 2.
  * Correctly handle DST when specifying a UTC time.
- Modernize specfile constructs / drop old ones.
- Do not silence errors from useradd/groupadd.
- Refreshed at-3.1.13-documentation-dir.patch,
  at-3.1.13-leak-fix.patch, at-3.1.13-massive_batch.patch,
  at-3.1.13-tomorrow.patch, at-3.1.14-joblist.patch,
  at-3.1.14-makefile-deps.patch,
  at-3.1.14-parse-suse-sysconfig.patch, at-3.1.14.patch,
  at-3.1.8-denylist.patch, at-3.1.8-jobdir-mtime.patch,
  at-atq-timeformat.patch, at-backport-old-privs.patch,
  at-piddir.patch, at-secure_getenv.patch for %autosetup.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626436800">- Update to 3.2.2:
  * Add script batch-job
- Refresh patch at-3.1.14.patch into at-3.2.2.patch
- Convert at-3.1.14-parse-suse-sysconfig.patch to UTF-8</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atd.service.patch
  Modified:
  * atd.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- Tumbleweed is not affected by the following SLE issues:
  * jsc#SLE-17611
  * bsc#1181576</changelog>
  <changelog author="jsegitz@suse.com" date="1637668800">- Drop ProtectSystem and ProtectHome hardening. Unfortunately they're
  breaking at jobs (boo#1192294)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645531200">- Drop systemd hardening as it breaks some jobs, fixes bsc#1196219
  * Remove harden_atd.service.patch</changelog>
</package>
<package pkgid="fbc803a91d19ee995823b66dfb9330dd95af54b2b74a7ba769d85b893405e1ce" name="at" arch="s390x">
  <version epoch="0" ver="3.2.2" rel="150400.4.3.10"/>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Cleanup with spec-cleaner
- Remove systemd conditional (we do not work on sle11 anyway)</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Version bump to 3.1.16 to match latest upstream:
  * Fix regression for sec-fix in bash we applied in form of patch
    till now - deleting at-3.1.15-sane-envkeys.patch
- Sync/split features to be patch specific, modifying:
  * at-3.1.13-pam.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1444737600">- add at-3.1.16-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Version update to at 3.1.20 to match latest upstream:
  * Pam and selinux implemented upstream
  * various tiny fixes
- Rebase patches:
  * at-3.1.13-documentation-dir.patch
  * at-3.1.13-massive_batch.patch
  * at-3.1.14-joblist.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-usePOSIXtimers.patch
  * at-3.1.14.patch
- Drop no longer needed patches:
  * at-3.1.13-formatbugs.patch
  * at-3.1.13-pam-session-as-root.patch
  * at-3.1.13-pam.patch
  * at-3.1.13-queue-nice-level.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500724801">- Drop patch at-3.1.8-eal3-manpages.patch merged upstream differently</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1540296000">- Version update to at 3.1.23 [bsc#1112660]
  * 832368-Using_of_the_meaningless_fcntl: Fix call of fcntl by
    replacing (long) 1 with FD_CLOEXEC
  * 892819-at__improvements_to_atd.service: Improve atd.service,
    see bug report 892819
  * 885891-at__stale_batchjobs_after_reboot: Remove stale at jobs
    after a boot.
  * 897669-897670-Some_fixes_in_the_manuals: Fix some warnings in
    manpages at.1 and atd.8
  * 883730-Remove_invalid_email_from_man_page: Remove invalid email
    from man pages.
  * Draft of a release script
  * Finalised script to release software.
- refresh at-atq-timeformat.patch
- refresh at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- atd.pamd: integrate pam_keyinit pam module [bsc#1144041]</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="kstreitova@suse.com" date="1582113600">- change login shell for at user from /bin/bash to /bin/false as it
  shouldn't need a valid login shell</changelog>
  <changelog author="jengelh@inai.de" date="1601640000">- Update to release 3.2.1
  * Print time of new job before the input of the commands.
  * Do not drop seconds on -t option.
  * Start using nice levels from 0 instead of 2.
  * Correctly handle DST when specifying a UTC time.
- Modernize specfile constructs / drop old ones.
- Do not silence errors from useradd/groupadd.
- Refreshed at-3.1.13-documentation-dir.patch,
  at-3.1.13-leak-fix.patch, at-3.1.13-massive_batch.patch,
  at-3.1.13-tomorrow.patch, at-3.1.14-joblist.patch,
  at-3.1.14-makefile-deps.patch,
  at-3.1.14-parse-suse-sysconfig.patch, at-3.1.14.patch,
  at-3.1.8-denylist.patch, at-3.1.8-jobdir-mtime.patch,
  at-atq-timeformat.patch, at-backport-old-privs.patch,
  at-piddir.patch, at-secure_getenv.patch for %autosetup.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626436800">- Update to 3.2.2:
  * Add script batch-job
- Refresh patch at-3.1.14.patch into at-3.2.2.patch
- Convert at-3.1.14-parse-suse-sysconfig.patch to UTF-8</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atd.service.patch
  Modified:
  * atd.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- Tumbleweed is not affected by the following SLE issues:
  * jsc#SLE-17611
  * bsc#1181576</changelog>
  <changelog author="jsegitz@suse.com" date="1637668800">- Drop ProtectSystem and ProtectHome hardening. Unfortunately they're
  breaking at jobs (boo#1192294)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645531200">- Drop systemd hardening as it breaks some jobs, fixes bsc#1196219
  * Remove harden_atd.service.patch</changelog>
</package>
<package pkgid="f1119592913eb014a14fb1f233b3c2f7dcd6fb11f594d3c51a2e92f2e8813155" name="at" arch="src">
  <version epoch="0" ver="3.2.2" rel="150400.4.3.10"/>
  <changelog author="lchiquitto@suse.com" date="1412596800">- Replace at-sane-envkeys.diff by at-3.1.15-sane-envkeys.patch,
  a simpler fix from upstream [bsc#899160]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Cleanup with spec-cleaner
- Remove systemd conditional (we do not work on sle11 anyway)</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Version bump to 3.1.16 to match latest upstream:
  * Fix regression for sec-fix in bash we applied in form of patch
    till now - deleting at-3.1.15-sane-envkeys.patch
- Sync/split features to be patch specific, modifying:
  * at-3.1.13-pam.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1444737600">- add at-3.1.16-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Version update to at 3.1.20 to match latest upstream:
  * Pam and selinux implemented upstream
  * various tiny fixes
- Rebase patches:
  * at-3.1.13-documentation-dir.patch
  * at-3.1.13-massive_batch.patch
  * at-3.1.14-joblist.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-usePOSIXtimers.patch
  * at-3.1.14.patch
- Drop no longer needed patches:
  * at-3.1.13-formatbugs.patch
  * at-3.1.13-pam-session-as-root.patch
  * at-3.1.13-pam.patch
  * at-3.1.13-queue-nice-level.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500724801">- Drop patch at-3.1.8-eal3-manpages.patch merged upstream differently</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1540296000">- Version update to at 3.1.23 [bsc#1112660]
  * 832368-Using_of_the_meaningless_fcntl: Fix call of fcntl by
    replacing (long) 1 with FD_CLOEXEC
  * 892819-at__improvements_to_atd.service: Improve atd.service,
    see bug report 892819
  * 885891-at__stale_batchjobs_after_reboot: Remove stale at jobs
    after a boot.
  * 897669-897670-Some_fixes_in_the_manuals: Fix some warnings in
    manpages at.1 and atd.8
  * 883730-Remove_invalid_email_from_man_page: Remove invalid email
    from man pages.
  * Draft of a release script
  * Finalised script to release software.
- refresh at-atq-timeformat.patch
- refresh at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- atd.pamd: integrate pam_keyinit pam module [bsc#1144041]</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="kstreitova@suse.com" date="1582113600">- change login shell for at user from /bin/bash to /bin/false as it
  shouldn't need a valid login shell</changelog>
  <changelog author="jengelh@inai.de" date="1601640000">- Update to release 3.2.1
  * Print time of new job before the input of the commands.
  * Do not drop seconds on -t option.
  * Start using nice levels from 0 instead of 2.
  * Correctly handle DST when specifying a UTC time.
- Modernize specfile constructs / drop old ones.
- Do not silence errors from useradd/groupadd.
- Refreshed at-3.1.13-documentation-dir.patch,
  at-3.1.13-leak-fix.patch, at-3.1.13-massive_batch.patch,
  at-3.1.13-tomorrow.patch, at-3.1.14-joblist.patch,
  at-3.1.14-makefile-deps.patch,
  at-3.1.14-parse-suse-sysconfig.patch, at-3.1.14.patch,
  at-3.1.8-denylist.patch, at-3.1.8-jobdir-mtime.patch,
  at-atq-timeformat.patch, at-backport-old-privs.patch,
  at-piddir.patch, at-secure_getenv.patch for %autosetup.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626436800">- Update to 3.2.2:
  * Add script batch-job
- Refresh patch at-3.1.14.patch into at-3.2.2.patch
- Convert at-3.1.14-parse-suse-sysconfig.patch to UTF-8</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atd.service.patch
  Modified:
  * atd.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- Tumbleweed is not affected by the following SLE issues:
  * jsc#SLE-17611
  * bsc#1181576</changelog>
  <changelog author="jsegitz@suse.com" date="1637668800">- Drop ProtectSystem and ProtectHome hardening. Unfortunately they're
  breaking at jobs (boo#1192294)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645531200">- Drop systemd hardening as it breaks some jobs, fixes bsc#1196219
  * Remove harden_atd.service.patch</changelog>
</package>
<package pkgid="093c7a719f0df6566fdfb56fffa2d9039522b9c091ad7a3a9e9654a8df7ae967" name="at" arch="x86_64">
  <version epoch="0" ver="3.2.2" rel="150400.4.3.10"/>
  <changelog author="crrodriguez@opensuse.org" date="1433419200">- atd.service: run After=nss-user-lookup.target not after
  systemd-user-sessions.service
- atd.service: run After=time-sync.target</changelog>
  <changelog author="tchvatal@suse.com" date="1434974400">- Cleanup with spec-cleaner
- Remove systemd conditional (we do not work on sle11 anyway)</changelog>
  <changelog author="tchvatal@suse.com" date="1434974401">- Version bump to 3.1.16 to match latest upstream:
  * Fix regression for sec-fix in bash we applied in form of patch
    till now - deleting at-3.1.15-sane-envkeys.patch
- Sync/split features to be patch specific, modifying:
  * at-3.1.13-pam.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="vcizek@suse.com" date="1435060800">- loadavg on Linux is a sum over all CPUs, so multiply LOADAVG_MX
  by the amount of CPUs when comparing to loadavg (bnc#889174)
  * added at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1444737600">- add at-3.1.16-handle_malformed_jobs.patch to prevent creation of
  the corrupted files and their looping [bnc#945124]</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Version update to at 3.1.20 to match latest upstream:
  * Pam and selinux implemented upstream
  * various tiny fixes
- Rebase patches:
  * at-3.1.13-documentation-dir.patch
  * at-3.1.13-massive_batch.patch
  * at-3.1.14-joblist.patch
  * at-3.1.14-parse-suse-sysconfig.patch
  * at-3.1.14-usePOSIXtimers.patch
  * at-3.1.14.patch
- Drop no longer needed patches:
  * at-3.1.13-formatbugs.patch
  * at-3.1.13-pam-session-as-root.patch
  * at-3.1.13-pam.patch
  * at-3.1.13-queue-nice-level.patch
  * at-3.1.14-selinux.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500724801">- Drop patch at-3.1.8-eal3-manpages.patch merged upstream differently</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kstreitova@suse.com" date="1540296000">- Version update to at 3.1.23 [bsc#1112660]
  * 832368-Using_of_the_meaningless_fcntl: Fix call of fcntl by
    replacing (long) 1 with FD_CLOEXEC
  * 892819-at__improvements_to_atd.service: Improve atd.service,
    see bug report 892819
  * 885891-at__stale_batchjobs_after_reboot: Remove stale at jobs
    after a boot.
  * 897669-897670-Some_fixes_in_the_manuals: Fix some warnings in
    manpages at.1 and atd.8
  * 883730-Remove_invalid_email_from_man_page: Remove invalid email
    from man pages.
  * Draft of a release script
  * Finalised script to release software.
- refresh at-atq-timeformat.patch
- refresh at-adjust_load_to_cpu_count.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- atd.pamd: integrate pam_keyinit pam module [bsc#1144041]</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="kstreitova@suse.com" date="1582113600">- change login shell for at user from /bin/bash to /bin/false as it
  shouldn't need a valid login shell</changelog>
  <changelog author="jengelh@inai.de" date="1601640000">- Update to release 3.2.1
  * Print time of new job before the input of the commands.
  * Do not drop seconds on -t option.
  * Start using nice levels from 0 instead of 2.
  * Correctly handle DST when specifying a UTC time.
- Modernize specfile constructs / drop old ones.
- Do not silence errors from useradd/groupadd.
- Refreshed at-3.1.13-documentation-dir.patch,
  at-3.1.13-leak-fix.patch, at-3.1.13-massive_batch.patch,
  at-3.1.13-tomorrow.patch, at-3.1.14-joblist.patch,
  at-3.1.14-makefile-deps.patch,
  at-3.1.14-parse-suse-sysconfig.patch, at-3.1.14.patch,
  at-3.1.8-denylist.patch, at-3.1.8-jobdir-mtime.patch,
  at-atq-timeformat.patch, at-backport-old-privs.patch,
  at-piddir.patch, at-secure_getenv.patch for %autosetup.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1622721600">- Change to using systemd-sysusers</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626436800">- Update to 3.2.2:
  * Add script batch-job
- Refresh patch at-3.1.14.patch into at-3.2.2.patch
- Convert at-3.1.14-parse-suse-sysconfig.patch to UTF-8</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_atd.service.patch
  Modified:
  * atd.service</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- Tumbleweed is not affected by the following SLE issues:
  * jsc#SLE-17611
  * bsc#1181576</changelog>
  <changelog author="jsegitz@suse.com" date="1637668800">- Drop ProtectSystem and ProtectHome hardening. Unfortunately they're
  breaking at jobs (boo#1192294)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645531200">- Drop systemd hardening as it breaks some jobs, fixes bsc#1196219
  * Remove harden_atd.service.patch</changelog>
</package>
<package pkgid="8acecc75062313dea4b1bd3d30977166381ddcaac4278c23420a96645e502f17" name="atkmm1_6" arch="src">
  <version epoch="0" ver="2.28.0" rel="150200.3.2.1"/>
  <changelog author="vuntz@opensuse.org" date="1285588800">- Update to version 2.22.0:
  + Just increased version to show that it's an API/ABI-stable
    release.</changelog>
  <changelog author="vuntz@opensuse.org" date="1291723200">- Update to version 2.22.1:
  + Distribute the GPL in the tarball, in addition to the LGPL,
    because the Windows build uses a GPL builder tool.</changelog>
  <changelog author="vuntz@opensuse.org" date="1294574400">- Update to version 2.22.2:
  + Install m4 files needed by recent versions of gtkmm when
    building from git.</changelog>
  <changelog author="fcrozat@novell.com" date="1300881600">- Update to version 2.22.4:
  + Avoid a tarball dependency on mm-common.
- Changes from version 2.22.3:
  + a tarball regeneration due to a changed m4 macro in mm-common.</changelog>
  <changelog author="dimstar@opensuse.org" date="1304164800">- Update to version 2.22.5:
  + bgo#645669: Install the m4 files even without
  - -enable-maintainer-mode, as with other modules.
- Use source services: download_url and set_version.</changelog>
  <changelog author="vuntz@opensuse.org" date="1310040000">- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add atkmm-devel to baselibs</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 2.22.6:
  + Add #includes needed with the latest glibmm.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="dimstar@opensuse.org" date="1367236800">- Update to version 2.22.7:
  + Remove the use of g_type_init() because it has been deprecated.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
</package>
<package pkgid="fb17b8b90e28263395ba7728b42c4042737dcb5f618b5e55cf6a0c09cd26ed6c" name="atkmm1_6" arch="src">
  <version epoch="0" ver="2.28.3" rel="150400.4.3.1"/>
  <changelog author="fcrozat@novell.com" date="1300881600">- Update to version 2.22.4:
  + Avoid a tarball dependency on mm-common.
- Changes from version 2.22.3:
  + a tarball regeneration due to a changed m4 macro in mm-common.</changelog>
  <changelog author="dimstar@opensuse.org" date="1304164800">- Update to version 2.22.5:
  + bgo#645669: Install the m4 files even without
  - -enable-maintainer-mode, as with other modules.
- Use source services: download_url and set_version.</changelog>
  <changelog author="vuntz@opensuse.org" date="1310040000">- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add atkmm-devel to baselibs</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 2.22.6:
  + Add #includes needed with the latest glibmm.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="dimstar@opensuse.org" date="1367236800">- Update to version 2.22.7:
  + Remove the use of g_type_init() because it has been deprecated.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
</package>
<package pkgid="e1a750846039d295851d00f7fb856b0270e210ccfaf94a96f93a4b35b35d0694" name="atkmm1_6-devel" arch="aarch64">
  <version epoch="0" ver="2.28.3" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
</package>
<package pkgid="7d4ecad13337e495cd04b73dccd6d8662a18a556f6b328ab03423c11fedf71e9" name="atkmm1_6-devel" arch="ppc64le">
  <version epoch="0" ver="2.28.3" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
</package>
<package pkgid="2a7ade83fed95917b0977446992b3611f3d0d40ebfdb3e1018786c4a9eb38944" name="atkmm1_6-devel" arch="s390x">
  <version epoch="0" ver="2.28.3" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
</package>
<package pkgid="3033c9d81a24656a73a2a1b899e5d3fed26586ed0f03d56cb45c9cbe4e07e29a" name="atkmm1_6-devel" arch="x86_64">
  <version epoch="0" ver="2.28.3" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
</package>
<package pkgid="8a535c0c470c4e0eb0a8e3a152f39fb8b61fe5624d3ecdcc4ce243b20f5aa367" name="atkmm1_6-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.28.3" rel="150400.4.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608292800">- Update to version 2.28.1:
  + Build:
  - Improve NMake support
  - Use __declspec(dllexport) when building with Visual Studio
  - Add Meson support
  - doc/reference/: Update for Doxygen &gt;= 1.8.16
- Add meson BuildRequires and macros following upstreams port.
- Add doxygen, graphviz and xsltproc  BuildRequires, needed now for
  building documentation.
- Replace gcc-c++ with generic c++_compiler BuildRequires.
- Tweak setup macro and fdupes call.</changelog>
  <changelog author="pgajdos@suse.com" date="1633608000">- turn off doc build, it does not work with new doxygen</changelog>
  <changelog author="yfjiang@suse.com" date="1664366400">- Update to version 2.28.3:
  + Build:
  - Support building with Visual Studio 2022 (Chun-wei Fan)
  - Meson build: Specify 'check' option in run_command()
    Will be necessary with future versions of Meson.
  - Meson build: Perl is not required by new versions of mm-common
  - Meson build: Avoid unnecessary configuration warnings
  - Meson build: Require meson &gt;= 0.55.0 (Kjell Ahlstedt)
- Require atk &gt;= 2.12.0
  Not a new requirement, but previously it was not specified in
  configure.ac and meson.build. (Kjell Ahlstedt)
- Rename README to README.md</changelog>
</package>
<package pkgid="10c6129b47f5df585b20878ebb623ef79f6a8f91be1383c1769b27292be71d89" name="atkmm1_6-doc" arch="noarch">
  <version epoch="0" ver="2.28.0" rel="150200.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1367236800">- Update to version 2.22.7:
  + Remove the use of g_type_init() because it has been deprecated.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
</package>
<package pkgid="db2429c6d205d19a6353c212b4c0597c5b9703d67a1de2170c44510edaf8e3c5" name="attica-qt5" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="48ddb379a1f3cd942d2bc11f108630755f9d7ffba89160b3ebcd4e145b723795" name="attica-qt5" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="7571a41060c6f38752731a0abdad398c9790f3face5dc866c6cde98e0ba122a6" name="attica-qt5" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="ae3bfdf9df1be4b41ea71d0fbb0388cd1eb3f9124b2fc4adb7b0f21996e4878b" name="attica-qt5" arch="src">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="2407dae64e116730950dc453dc190647e25dac593e48f820843f984890f2dfc5" name="attica-qt5" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="10343f3613de3dc036890673b4a15548a77512525dc78f8ec7f95c10aaad477f" name="attica-qt5-devel" arch="aarch64">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="0b52e2c0e49372f453371f7ea162e814d071d65599e13b5f5b1fa4015fe15aaa" name="attica-qt5-devel" arch="ppc64le">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="17a3794492ad665c587bc3160e45febbc00fd295f52c0e0486e4a9d7d175a710" name="attica-qt5-devel" arch="s390x">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="532404799d58ba48775310f621a759be2940bc68dc6ea3c9444d7a09db4e3604" name="attica-qt5-devel" arch="x86_64">
  <version epoch="0" ver="5.90.0" rel="150400.3.2.3"/>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Use Q_DECLARE_OPERATORS_FOR_FLAGS in same namespace as flags definition
  * Remove obsolete COPYING files</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- Changes since 5.74.0:
  * Compile without deprecated method against qt5.15</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * If include is define in .h remove it if it's defined in .cpp too (scripted)
  * Remove not implemented method</changelog>
  <changelog author="christophe@krop.fr" date="1607169600">- Update to 5.77.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.77.0
- Changes since 5.76.0:
  * Fix crash in provider loading by checking reply pointer before deref (kde#427974)</changelog>
  <changelog author="christophe@krop.fr" date="1609934400">- Update to 5.78.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.78.0
- Changes since 5.77.0:
  * Honour the job being aborted immediately (kde#429939)</changelog>
  <changelog author="christophe@krop.fr" date="1612785600">- Update to 5.79.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.79.0
- Changes since 5.78.0:
  * Make int -&gt; QString conversion explicit
  * Port from QNetworkRequest::FollowRedirectsAttribute to QNetworkRequest::RedirectPolicyAttribute</changelog>
  <changelog author="christophe@krop.fr" date="1615118400">- Update to 5.80.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.80.0
- Changes since 5.79.0:
  * Remove unused forward declarations</changelog>
  <changelog author="christophe@krop.fr" date="1617624000">- Update to 5.81.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.81.0
- No code change since 5.80.0</changelog>
  <changelog author="christophe@krop.fr" date="1619870400">- Update to 5.82.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.82.0
- No code change since 5.81.0</changelog>
  <changelog author="christophe@krop.fr" date="1622894400">- Update to 5.83.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.83.0
- Changes since 5.82.0:
  * Bump required CMake version to 3.16</changelog>
  <changelog author="christophe@krop.fr" date="1625400000">- Update to 5.84.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.84.0
- Changes since 5.83.0:
  * Longer timeout for the provider test
  * State library license in yaml file
  * Generate license compliance test
  * Do the documentation thing, with @since and whatnot
  * Constness fix
  * Add http headers to Metadata (and set it from BaseJob)
- Only install the license files once</changelog>
  <changelog author="christophe@krop.fr" date="1628251200">- Update to 5.85.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.85.0
- Changes since 5.84.0:
  * Implement a getter for Provider's icon data</changelog>
  <changelog author="christophe@krop.fr" date="1630929600">- Update to 5.86.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.86.0
- Changes since 5.85.0:
  * Port to QStringView</changelog>
  <changelog author="christophe@krop.fr" date="1631707200">- Drop the unneeded baselibs.conf.</changelog>
  <changelog author="christophe@krop.fr" date="1633089600">- Add upstream patch to avoid unnecessary network traffic:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1633262400">- Update to 5.87.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.87.0
- Changes since 5.86.0:
  * Do not mark jobs that have been aborted as errored
  * Add Gitlab CI configuration
  * Ensure categories.xml is only fetched once in parallel
  * Do not start basejobs twice
  * Add CI configuration file
- Drop upstream patch:
  * 0001-Ensure-categories.xml-is-only-fetched-once-in-parall.patch</changelog>
  <changelog author="christophe@krop.fr" date="1636286400">- Update to 5.88.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.88.0
- Changes since 5.87.0:
  * Port QStringRef (deprecated) to QStringView
  * Add FreeBSD CI
  * Add Android CI</changelog>
  <changelog author="christophe@krop.fr" date="1636286401">- Strip 'Source' URL for faster submissions</changelog>
  <changelog author="christophe@krop.fr" date="1638619200">- Update to 5.89.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.89.0
- No code change since 5.88.0</changelog>
  <changelog author="christophe@krop.fr" date="1641211200">- Update to 5.90.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/frameworks/5/5.90.0
- Changes since 5.89.0:
  * Remove unused and not exported QDebug stream operator for Attica::Category
  * Change the build system to enable building with Qt 6</changelog>
</package>
<package pkgid="598ffd937d5d9fa096b24ea83de33eb7850c415f12bd20858ebfbbc0fa69a1a2" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="fdcb185170f410b88d087a587c64329fed7883513657e5980944dbcb0d2c9dd9" name="audit" arch="ppc64le">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="f874323b4e511a737dc3fed636e48948b5c38a384b2700946e9fc5fc0ca860f3" name="audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="50b152435fa15d9ddf2bc359541fae8846bb89f9bb85fbc63129418d7bb5191d" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="98da512bfba549daa887cb481653f3387f2561a7d6686acbafb3067fb50280c4" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="eb9d319890a94fbe813d9d23d658322764fed4d153a40d345cd73c3f2bea708e" name="audit" arch="ppc64le">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="4e3ebce9bfbd1706ddd1892391c969a0a12134113b227ab332c3dc2ba00ffe8b" name="audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="8687efc2f05093d59ab120cf86ecdfcfc218bb5ca4f86b5e5766e7ac1544ac3c" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="3486133aba37c43eabb3bff7f55b909f8a438b392b07000a2db1551652a91a0f" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="ddece4dd389f98a93b996ee21514aef6f4c283d7bea9bb69915d5ba9bd71caf5" name="audit-audispd-plugins" arch="ppc64le">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="29a1284d5a34788adb72aac9c2e4aff9c946c0ed845fee6bda15f0a6a32c374c" name="audit-audispd-plugins" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="2241b4d8614309a2a4b28356b8be61ae53e477ea1a126d67a0acc21bb194c700" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="f98d25588e41ac90f477edd4f5b46c77fb59508f7d998124f780eee44c113571" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="4cdd0e2b14a9bb73e547416633d4be7bef41477a3931b9e65a7524ac5abb2007" name="audit-audispd-plugins" arch="ppc64le">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="efa395ef7782f9cfa471c247cdc89b17361d63a1b3e25589f25502d0e1c8126a" name="audit-audispd-plugins" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="25d344a883e1c965b412aba01485c6d0ea83d10bf13f183795d108902fd80651" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="9d9952c1e30c4b406c21971f9572e1039511aca628b0791ed7ffb873a5f463fc" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.3.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="b875f637e3a1ae314094a457292bbd411386c33c5ee244e3b935033cd56e8a70" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.6.1"/>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomá? Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ali.abdallah@suse.com" date="1659441600">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1667304000">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
</package>
<package pkgid="6ac3752fd6ecb7e1255f230be55830a03e568876b73f84b46d556a27873dbdad" name="augeas" arch="aarch64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="828fad8c9afcb035cf0ba957e8c655a8c3e767f45e0e8af5f1b5fb12f9f78a6d" name="augeas" arch="ppc64le">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="e041338fd3cb823053ed8e874912ad3996bfd9ffb83b22724fea1151ffc76488" name="augeas" arch="s390x">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="7431f34d1248ab9de427fdbd80630f675941ca25a8de9d159701cf163c2bf08d" name="augeas" arch="src">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="2ecffc7f4ff0b6aaec209b6fdb292d8af9fc8f48644f48e5dc68367585ed05f9" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="4e5db1c75a8c73c6b2a344ffb23ece5d981017b8160935a69d05092fafa056cf" name="augeas-devel" arch="aarch64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="6e0291d6a553d5ad58d6e65d4e0086323350a84f148c17798bad43758fdaf46e" name="augeas-devel" arch="ppc64le">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="08035532ae9f5d172a5caa7443d61538cca92910bfa32ad5813aa956cceb2594" name="augeas-devel" arch="s390x">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="9abc7c3073025cf83557a1f159f72eb3a551d15689a0b40af93478618bc088f7" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="42c600db6bd5d83ab0c871e574a999051d639fc2f6c9679ed78597c76ead2a91" name="augeas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="f23230d7731f419f4d29152b8d6c13de44e0ae0403ffbe48d5298dfd2820e83b" name="augeas-lense-tests" arch="aarch64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="2604f32f7918dab71584bd19331e1969a05f3a730ad2faa322dfb1ab8860d8d2" name="augeas-lense-tests" arch="ppc64le">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="186bcf54fe05f04b1e6d6942ff28327e866e642e2510a7ba81df67d97b424458" name="augeas-lense-tests" arch="s390x">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="554cbd515580ab999264b3ee2d79c5ad170c518254f14c21337b31dae87a7fc0" name="augeas-lense-tests" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="db287c09224d53e2eaa91dcc9afa72cdc4bea7b61ae303e53f4c48b719fd1320" name="augeas-lenses" arch="aarch64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="546bf3b2a383238fdd8e231bc8b64f48bbff12fd8f0b3e71e6c683c22fb2f2c4" name="augeas-lenses" arch="ppc64le">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="c6dfc083164fd59a2e8b1ce2c426e7039183f70475a780320e076ad4adaa114f" name="augeas-lenses" arch="s390x">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="54f1d0001598c1cd2932c65038b2618f182eb1e277c152d25db30feba4b2cf09" name="augeas-lenses" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="150400.3.3.6"/>
  <changelog author="p.drouand@gmail.com" date="1418904000">- Update  to version 1.3.0
  + General changes/additions
  * Add missing cp entry in manpage (GH issue #78)
  * Add seq to vim syntax highlight (Robert Drake)
  * Update augtool.1 man page with new commands and --span, RHBZ#1100077
  * augtool autocomplete includes command aliases, RHBZ#1100184
  * Remove unused "filename" argument from dump-xml command, RHBZ#1100106
  * aug_save returns non-zero result when unable to delete files,
    RHBZ#1091143
  + Lens changes/additions
  * Aliases: permit missing whitespace between colon and recipients
  * AptPreferences: Support spaces in origin fields
  * Cgconfig: handle additional valid controllers (Andy Grimm)
  * Chrony: New lens to parse /etc/chrony.conf (Pat Riehecky)
  * CPanel: New lens to parse cpanel.config files
  * Desktop: Allow @ in keys (GH issue #92)
  * Device_map: Parse all device.map files under /boot (Mike Latimer)
  * Dhclient: Add support for option modifiers (Robert Drake,
    GH issue #95)
    Parse hash statements with dhcp-eval strings
  * Dhcpd: stmt_string quoted blocks no longer store quote marks
    (incompatible change),
    many changes to support more record types (Robert Drake)
  * Group: NIS support (KaMichael)
  * Grub: handle "foreground" option, RHBZ#1059383 (Miguel Armas)
  * Gshadow: New lens (Lorenzo Catucci)
  * Httpd: Allow eol comments after section tags
    Allow continued lines inside quoted value (GH issue #104)
    Allow comparison operators in tags (GH issue #154)
  * IPRoute2: handle "/" in protocol name, swap ID and name fields
    (incompatible change), RHBZ#1063968,
    handle hex IDs and hyphens, as present in
    rt_dsfield, RHBZ#1063961
  * Iptables: parse /etc/sysconfig/iptables.save, RHBZ#1144651
  * Kdump: parse new options, permit EOL comments, refactor, RHBZ#1139298
  * Keepalived: Add more virtual/real server settings and checks, RHBZ#1064388
  * Known_Hosts: New lens for SSH known hosts files
  * Krb5: permit braces in values when not in sub-section, RHBZ#1066419
  * Ldso: handle "hwcap" lines (GH issue #100)
  * Lvm: support negative numbers, parse /etc/lvm/lvm.conf (Pino Toscano)
  * Multipath: add support for rr_min_io_rq (Joel Loudermilk)
  * NagiosConfig and NagiosObjects: Fix documentation (Simon Sehier)
  * NetworkManager: Use the Quote module, support # in values (no eol comments)
  * OpenVPN: Add support for fragment, mssfix, and script-security
    (Frank Grötzner)
  * Pagekite: New lens (Michael Pimmer)
  * Pam: Add partial support for arguments enclosed in [] (Vincent Brillault)
  * Passwd: Refactor lens (Lorenzo Catucci)
  * Redis: Allow empty quoted values (GH issue #115)
  * Rmt: New lens to parse /etc/default/rmt, RHBZ#1100549
  * Rsyslog: support complex $template lines, property filters and file
    actions with templates, RHBZ#1083016
  * Services: permit colons in service name, RHBZ#1121263
  * Shadow: New lens (Lorenzo Catucci)
  * Shellvars: Handle case statements with same-line ';;', RHBZ#1033799
    Allow any kind of quoted values in block
    conditions (GH issue #118)
    Support $(( .. )) arithmetic expansion in variable
    assignment, RHBZ#1100550
  * Simplevars: Support flags and empty values
  * Sshd: Allow all types of entries in Match groups (GH issue #75)
  * Sssd: Allow ; for comments
  * Squid: Support configuration files for squid 3 (Mykola Nikishov)
  * Sudoers: Allow wuoted string in default str/bool params (Nick Piacentine)
  * Syslog: Support "# !" style comments (Robert Drake, GH issue #65)
    Permit IPv6 loghost addresses, RHBZ#1129388
  * Systemd: Allow quoted Environment key=value pairs, RHBZ#1100547
    Parse /etc/sysconfig/*.systemd, RHBZ#1083022
    Parse semicolons inside entry values, RHBZ#1139498
  * Tuned: New lens for /etc/tuned/tuned-main.conf (Pat Riehecky)
  * UpdateDB: New lens to parse /etc/updatedb.conf
    (incompatible change as this file used to be processed with
    Simplevars)
  * Xml: Allow backslash in #attribute values (GH issue #145)
    Parse CDATA elements (GH issue #80)
  * Xymon_Alerting: refactor lens (GH issue #89)
- Remove the sig and the keyring file as there is no gpg verification
  anyway
- Remove augeas-device_map-grub2.patch, fixed on upstream release</changelog>
  <changelog author="meissner@suse.com" date="1418904001">- restore keyring and .sig file, as this is checked by the OBS
  source service</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Whitespace</changelog>
  <changelog author="tchvatal@suse.com" date="1437048000">- Version bump to 1.4.0:
  * Loads of bugfixes all around the package
  * Read up NEWS file for the detailed changes</changelog>
  <changelog author="cbosdonnat@suse.com" date="1459857600">- Fix errors showing up in guestfs tools.
  Add upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1463054400">- Update to version 1.5.0:
  - General changes/additions
  * augtool: new --timing option that prints after each operation how long
    it took
  * augtool: print brief help message when incorrect options are given rather
    than dumping all help text
  * Path expressions: optimize performance of evaluating certain
    expressions
  * lots of safety improvements in libfa to avoid using uninitialized
    values and the like (Daniel Trebbien)
  * tolerate building against OSX' libedit (Issue #256)
  - API changes
  * aug_match: fix a bug where expressions like /foo/*[2] would match a
    hidden node and pretend there was no match at all. We now make sure
    we never match a hidden node. Thanks to Xavier Mol for reporting the
    problem.
  * aug_get: make sure we set *value to NULL, even if the provided path is
    invalid (Issue #372)
  * aug_rm: fix segfault when deleting a tree and one of its ancestors
    (Issue #319)
  * aug_save: fix segfault when trying to save an invalid subtree. A
    routine that was generating details for the error message overflowed
    a buffer it had created (Issue #349)
  - Lens changes/additions
  * AptConf: support hash comments
  * AptSources: support options (Issue #295),
    support brackets with spaces in URI (GH #296)
    rename test file to test_aptsources.aug
  * Chrony: allow signed numbers and indentation, fix stray EOL entry,
    disallow comment on EOL, add many missing directives and
    options (Miroslav Lichvar, RHBZ#1213281)
    add new directives and options that were added in
    chrony-2.2 and chrony-2.3 and improve parsing of
    access configuration (Miroslav Lichvar, Issue #348)
    add new options for chrony-2.4 (Miroslav Lichvar)
  * Dhclient: avoid put ambiguity for node without value (Issue #294)
  * Group: support NIS map, support an overridden and disabled password,
    i.e. `+:*::` (Matt Dainty) (Issue #258)
  * Host_Conf: support spaces between list items (Cedric Bosdonnat, Issue #358)
  * Httpd: add paths to SLES vhosts
    (Jan Doleschal) (Issue #268)
    parse backslashes in directive arguments (Issue #307)
    parse mismatching case of opening/closing tags
    parse multiple ending section tags on one line
    parse wordlists in braces in SSLRequire directives
    parse directive args starting with double quote (Issue #330)
    parse directive args containing quotes
    support perl directives (Issue #327)
    parse line breaks/continuations in section arguments
    parse escaped spaces in directive/section arguments
    parse backslashes at the start of directive args (Issue #324)
  * Inputrc: support $else (Cedric Bosdonnat, Issue #359)
  * Interfaces: add support for source-directory (Issue #306)
  * Json: add comments support, refactor,
    allow escaped quotes and blackslashes
  * Keepalived: fix space/tag alignments and hanging spaces,
    add vrrp_mcast_group4 and vrrp_mcast_group6,
    add more vrrp_instance flags,
    add mcast/unicast_src_ip and unicast_peer,
    add missing garp options,
    add vrrp_script options,
    expand vrrp_sync_group block,
    allow notify option
    (Joe Topjian) (Issue #266)
  * Known_Hosts: refactoring and description fixed
  * Logrotate: support dateyesterday option (Chris Reeves) (GH #367, #368)
  * MasterPasswd: new lens to parse /etc/master.passwd
    (Matt Dainty) (Issue #258)
  * Multipath: add various missing keywoards (Olivier Mangold) (Issue #289)
  * MySQL: include /etc/my.cnf.d/*.cnf (Issue #353)
  * Nginx: improve typechecking of lens,
    allow masks in IP keys and IPv6 (Issue #260)
    add @server simple nodes (Issue #335)
  * Ntp: add support for basic interface syntax
  * OpenShift_Quickstarts: Use Json.lns
  * OpenVPN: add all options available in OpenVPN 2.3o
    (Justin Akers) (Issue #278)
  * Puppetfile: name separator is not mandatory
    add support for moduledir (Christoph Maser)
  * Rabbitmq: remove space in option name,
    add support for cluster_partitioning_handling,
    add missing simple options (Joe Topjian) (Issue #264)
  * Reprepro_Uploaders: add support for distribution field
    (Mathieu Alorent) (Issue #277),
    add support for groups (Issue #283)
  * Rhsm: new lens to parse subscription-manager's /etc/rhsm/rhsm.conf
  * Rsyslog: improve property filter parsing,
    treat whitespace after commas as optional.
    recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282),
    add support for redirecting output to named pipes
    (Gerlof Fokkema) (Issue #366)
  * Shellvars: allow partial quoting, mixing multiple styles
    (Kaarle Ritvanen) (Issue #183);
    allow wrapping builtin argument to multiple lines
    (Kaarle Ritvanen) (Issue #184);
    support ;; on same line with multiple commands
    (Kaarle Ritvanen) (Issue #185);
    allow line wrapping and improve quoting support
    (Kaarle Ritvanen) (Issue #187);
    accept [] and [[]] builtins (Issue #188);
    allow &amp;&amp; and || constructs after condition
    (Kaarle Ritvanen) (Issue #265);
    add pattern nodes in case entries
    (BREAKING CHANGE: case entry values are now in a
    @pattern subnode) (Kaarle Ritvanen) (Issue #265)
    add eval builtin support;
    add alias builtin support;
    allow (almost) any command;
    allow &amp;&amp; and || after commands (Issue #215);
    allow wrapping command sequences
    (Kaarle Ritvanen) (Issue #333);
    allow command-specific environment variable
    (Kaarle Ritvanen) (Issue #332);
    support subshells (Issue #339)
    newlines in start of functions
    allow newlines after actions
    support comments after function name (Issue #339)
    exclude SuSEfirewall2 (Cedric Bosdonnat, Issue #357)
  * Simplelines: parse OpenBSD's hostname.if(5)
    files (Jasper Lievisse Adriaanse) (Issue #252)
  * Smbusers: add support for ; comments
  * Spacevars: support flags (Issue #279)
  * Ssh: add support for HostKeyAlgorithms, KexAlgorithms
    and PubkeyAcceptedKeyTypes (Oliver Mangold) (Issue #290),
    add support for GlobalKnownHostsFile (Issue #316)
  * Star: New lens to parse /etc/default/star
  * Sudoers: support for negated command alias
    (Geoff Williams) (Issue #262)
  * Syslog: recognize '~' as a valid syslog action (discard)
    (Gregory Smith) (Issue #282)
  * Tmpfiles: new lens to parse systemd's tempfiles.d configuration
    files (Julien Pivotto) (Issue #269)
  * Trapperkeeper: new lens for Puppet server configuration files
  * Util: add comment_c_style_or_hash lens
    add empty_any lens
  * Vsftpd: add isolate and isolate_network options
    (Florian Chazal) (Issue #334)
  * Xml: allow empty document (Issue #255)
  * YAML: new lens (subset) (Dimitar Dimitrov) (Issue #338)
- Drop upstreamed patches:
    27d8457-inputrc-lens-support-mapping-like.patch
    2d12670-inputrc-lens-support-else.patch
    49bcfbe-Exclude-network-if-up.d-SuSEfirewall2-in-shellvars-l.patch
    7558c12-host_conf-lens-spaces-between-list-items-support.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1477656000">- Version update to 1.6.0:
  * See the NEWS file for the details</changelog>
  <changelog author="tchvatal@suse.com" date="1496145600">- Version update to 1.8.0:
  * See the News file for all the details
- Verified it contains fixes for bsc#933210 bsc#975729 bsc#925225
  bsc#1023204 CVE-2014-8119</changelog>
  <changelog author="vcizek@suse.com" date="1509019200">- Version update to 1.9.0:
  - General changes/additions
  * Fix error in handling escaped whitespace at the end of path expressions
    (addresses CVE-2017-7555)
  * several improvements to the error messages when transforming a tree
    back to text fails. They now make it clearer what part of the tree
    was problematic, and what the tree should have looked like.
  * Fixed the pkg-config file, which should now be usable
  * Fix handling of backslash-escaping in strings and regular expressions
    in the lens language. We used to handle constructs like "\\" and
    /\\\\/ incorrectly. (Issue #495)
  * do not unescape the default value of a del on create; otherwise we are
    double unescaping these strings (Issue #507)
  * remove tempfile when saving files because destination is not writable
    (Issue #479)
  * span information is now updated on save (Issue #467)
  * fix lots of warnings generated by gcc 7.1
  * Various changes to reduce bashisms in tests and make them run on
    FreeBSD (Romain Tartière)
  - API changes
  * add function aug_ns_attr to allow iterating through a nodeset
    quickly. See examples/dump.c for an example of how to use them
    instead of aug_get, aug_label etc. and for a way to measure
    performance gains.
  - Lens changes/additions
  * Ceph: new lens for /etc/ceph/ceph.conf
  * Cgconfig: accept fperm &amp; dperm in admin &amp; task (Pino Toscano)
  * Dovecot: also load files from /usr/local/etc (Roy Hubbard)
  * Exports: relax the rules for the path at the beginning of a line so
    that double-quoted paths are legal, too
  * Getcap: new lens to parse generic termcap-style capability databases
  * Grub: accept toplevel 'boot' entry (Pino Toscano)
  * Httpd: handle empty comments with a continuation line (Issue #423);
    handle '&gt;""' in a directive properly (Issue #429); make space between
    quoted arguments optional (Issue #435); accept quoted strings as part
    of bare arguments (Issue #470)
  * Nginx: load files from sites-available directory (Omer Katz) (Issue #471)
  * Nslcd: new lens for nss-pam-ldapd config (Jose Plana)
  * Oz: New lense for /etc/oz/oz.cnf
  * postfix lenses: also load files from /usr/local/etc (Roy Hubbard)
  * Properties: accept DOS line endings (Issue #468)
  * Rtadvd: new lens to parse the rtadvd configuration file (Matt Dainty)
  * Rsyslog: load files from /etc/rsyslog.d (Doug Wilson) (Issue #475);
    allow spaces before the # starting a comment; allow comments inside
    config statements like 'module'
  * Ssh: accept '=' to separate keyword from arguments
  * Sshd: split HostKeyAlgorithms into list of values; recognize quoted
    group names with spaces in them (Issue #477)
  * Sudoers: recognize "match_group_by_gid" (Luigi Toscano) (Issue #482)
  * Syslog: allow spaces before the # starting a comment
  * Termcap: new lens to parse termcap capability databases (Matt Dainty)
  * Vsftpd: accept seccomp_sandbox (Denys Stroebel)
  * Xymon: accept 'group-sorted' directive (Issue #462)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="vcizek@suse.com" date="1521547200">- update to 1.10.1:
  General changes/additions
    New CLI utility 'augmatch' to print the tree for a file and select
    some of its contents
    New command 'count' in augtool
    New function 'not(bool) -&gt; bool' for path expressions
    The path expression 'label[. = "value"]' can now be written more
    concisely as 'label["value"]'
  API changes
    libfa has now a function fa_json to export an FA as a JSON file, and
    fa_state_* functions that make it possible to iterate over the FA's
    states and transitions. (Pedro Valero Mejia)
    Add functions aug_ns_label, aug_ns_value, aug_ns_count, and
    aug_ns_path to get the label (with index), the value, the number of
    nodes, and the fully qualified path for nodes stored in a nodeset in
    a variable efficiently
  Lens changes/additions
    Grubenv: new lens to process /boot/grub/grubenv (omgold)
    Httpd: also read files from /etc/httpd/conf.modules.d/*.conf
    (Tomas Meszaros) (Issue #537)
    Nsswitch: allow comments at the end of a line (Philip Hahn) (Issue #517)
    Ntp: accept 'ntpsigndsocket' statement (Philip Hahn) (Issue #516)
    Properties: accept empty comments with DOS line endings (Issue #161)
    Rancid: new lens for RANCiD router databases (Matt Dainty)
    Resolv: accept empty comments with DOS line endings (Issue #161)
    Systemd: also process /etc/systemd/logind.conf (Pat Riehecky)
    YAML: process a document that is just a sequence (John Vandenberg)
- drop chrpath dependency, the offending dump binary is no longer shipped</changelog>
  <changelog author="jengelh@inai.de" date="1521547201">- Fix RPM groups.</changelog>
  <changelog author="ecsos@opensuse.org" date="1545652800">- update to 1.11.0
  General changes/additions
  - augmatch: add a --quiet option; make the exit status useful
    to tell whether there was a match or not
  - Drastically reduce the amount of memory needed to evaluate
    complex path expressions against large files (Issue #569)
  - Fix a segfault on OSX when 'augmatch' is run without any
    arguments (Issue #556)
  API changes
  - aug_source did not in fact return the source; and always
    returned NULL for that. That has been fixed.
  Lens changes/additions
  - Chrony: add new options supported in chrony 3.2 and 3.3
    (Miroslav Lichvar)
  - Dhclient: fix parsing of append/prepend and similar
    directives (John Morrissey)
  - Fstab: allow leading whitespace in mount entry lines
    (Pino Toscano) (Issue #544)
  - Grub: tolerate some invalid entries. Those invalid entries
    get mapped to '#error' nodes
  - Httpd: accept comments with whitespace right after a tag
    opening a section (Issue #577)
  - Json: allow escaped slashes in strings (Issue #557)
  - Multipath: accept regular expressions for devnode, wwid,
    and property in blacklist and blacklist_exceptions sections
    (Issue #564)
  - Nginx: parse /etc/nginx/sites-enabled (plumbeo) allow
    semicolons inside double quoted strings in simple directives,
    and allow simple directives without an argument (Issue #566)
  - Redis: accept the 'bind' statement with multiple IP addresses
    (yannh) (Issue #194)
  - Rsyslog: support include() directive introduced in
    rsyslog 8.33
  - Strongswan: new lens (Kaarle Ritvanen)
  - Systemd: do not try to treat *.d or *.wants directories as
    configuration files (Issue #548)</changelog>
  <changelog author="vcizek@suse.com" date="1549972800">- Don't ignore %check test result, the testsuite now successfully
  passes</changelog>
  <changelog author="mliska@suse.cz" date="1552305600">- Add gcc9-disable-broken-test.patch in order to address bsc#1120894.</changelog>
  <changelog author="elimat@opensuse.org" date="1594123200">- update to 1.12.0
  General changes/additions
  - update gnulib to 91584ed6
  Lens changes/additions
  - Anaconda: new lens to process /etc/sysconfig/anaconda instead of Shellvars (Pino Toscano) (Issue #597)
  - DevfsRules: add lens for FreeBSD devfs.rules files
  - Dovecot: permit ! in block titles (Nathan Ward) (Issue #599)
  - Hostname: Allow creation of hostname when file is missing (David Farrell) (Issue #606)
  - Krb5: add more pkinit_* options (Issue #603)
  - Logrotate: fix missing recognition of double quoted filenames (Issue #611)
  - Multipath: accept values enclosed in quotes (Issue #583)
  - Nginx: support unix sockets as server address (Issue #618)
  - Nsswitch: add merge action (Issue #609)
  - Pam: accept continuation lines (Issue #590)
  - Puppetfile: allow symbols as (optional) values (Issue #619) allow comments in entries (Issue #620)
  - Rsyslog: support dynamic file paths (Issue #622) treat #!/+/- as comment (arnolda, PR #595)
  - Syslog: accept 'include' directive (Issue #486)
  - Semanage: new lens to process /etc/selinux/semanage.conf instead of Simplevars (Pino Toscano) (Issue #594)
  - Shellvars: allow and/or in @if conditions (#582) accept functions wrapped in round brackets, accept variables with a dash in their name, exclude csh/tcsh profile scripts (Pino Toscano) (Issue #600) accept variable as command (Issue #601)
  - Ssh: accept RekeyLimit (Issue #605)
  - Sshd: accept '=' to separate option names from their values (Emil Dragu, #587)
  - Sudoers: support 'always_query_group_plugin' flag (Steve Traylen, #588)
  - Strongswan: parse lists. This is a backwards-incompatible change since list entries that were parsed into a single string are now split into a list of entries (Kaarle Ritvanen)
  - Toml: new lens to parse .toml files (PR #91)
  - Xorg: accept empty values for options (arnolda, PR #596)
- refresh patches
- run spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1612872000">- Add new directives and options supported in chrony since 3.3 up to 4.0.
  * augeas-new_options_for_chrony.patch
  * [bsc#1178470]
  * sourced from https://github.com/hercules-team/augeas/pull/698</changelog>
  <changelog author="jsikes@suse.com" date="1622030400">- Allow all printable ASCII characters in WPA-PSK definition
  * augeas-allow_printable_ASCII.patch
  * bsc#1185524
  * Sourced from https://github.com/hercules-team/augeas/pull/723/commits
  * Credit to Michal Filka &lt;mfilka@suse.com&gt;</changelog>
  <changelog author="dmueller@suse.com" date="1623153600">- add remove-unportable-tests.patch to fix build</changelog>
  <changelog author="david.anes@suse.com" date="1649246400">- add augeas-sysctl_parsing.patch (bsc#1197443)
  * backport original patch and rebase</changelog>
</package>
<package pkgid="b4884c622297f7731e781d2abd7b502160338939b35ab151b83c727248e02571" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.4.37" rel="150400.3.3.1"/>
  <changelog author="kanderssen@suse.com" date="1635249600">- Add the "keep_unknown_lv" element to the partitioning schema
  (bsc#1191968).
- 4.4.18</changelog>
  <changelog author="jlopez@suse.com" date="1635249601">- Avoid internal error when checking signature (bsc#1192022).
- 4.4.19</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
</package>
<package pkgid="b833c7b3eb095bef11ac326b8d3dd66889b6543d3386bc3a6c95d1dfb7a6e332" name="autoyast2" arch="src">
  <version epoch="0" ver="4.4.37" rel="150400.3.3.1"/>
  <changelog author="kanderssen@suse.com" date="1635249600">- Add the "keep_unknown_lv" element to the partitioning schema
  (bsc#1191968).
- 4.4.18</changelog>
  <changelog author="jlopez@suse.com" date="1635249601">- Avoid internal error when checking signature (bsc#1192022).
- 4.4.19</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
</package>
<package pkgid="1e8ce6855bbaeb9cf247b95aa39bce7827fd29157c3254882120ea47f1d31bc3" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.4.39" rel="150400.3.8.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
</package>
<package pkgid="5cae6a4346775fef246dce636b701b2ce7ce4967eb4defbedbc9e726067a5f59" name="autoyast2" arch="src">
  <version epoch="0" ver="4.4.39" rel="150400.3.8.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
</package>
<package pkgid="82c9889dd1e48b683443b2144e07ec06496792f25e4120af45b1176f846272bc" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.4.41" rel="150400.3.13.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.4.40</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.4.41</changelog>
</package>
<package pkgid="4f23f5c0b705d7399777da6575ab8c81d9d50bd04303aa6bff43d3e44eaab0fc" name="autoyast2" arch="src">
  <version epoch="0" ver="4.4.41" rel="150400.3.13.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.4.40</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.4.41</changelog>
</package>
<package pkgid="fa699f46efa2bde33385dd0531472a6bc3cb6f53d3a3a8e491f3e4ac78487e3e" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.4.43" rel="150400.3.16.1"/>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.4.40</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.4.41</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476800">- Add support for security policies validation (jsc#SLE-24764).
- 4.4.42</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.4.43</changelog>
</package>
<package pkgid="22ca8ef64b3072e9404f6e342884e5c3a3e079d1f8dccdaa195c478fb7bc980f" name="autoyast2" arch="src">
  <version epoch="0" ver="4.4.43" rel="150400.3.16.1"/>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.4.40</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.4.41</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476800">- Add support for security policies validation (jsc#SLE-24764).
- 4.4.42</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.4.43</changelog>
</package>
<package pkgid="f1827e8110d7492b1eae0fdc627abca16efa48a5a2447233da3e0038d28af979" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.4.37" rel="150400.3.3.1"/>
  <changelog author="kanderssen@suse.com" date="1635249600">- Add the "keep_unknown_lv" element to the partitioning schema
  (bsc#1191968).
- 4.4.18</changelog>
  <changelog author="jlopez@suse.com" date="1635249601">- Avoid internal error when checking signature (bsc#1192022).
- 4.4.19</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
</package>
<package pkgid="db18fbba239fa47c14ac72b80a9862949b76ec21c5d0451fe83aff181b23c3cf" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.4.39" rel="150400.3.8.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
</package>
<package pkgid="f4e505faa0f85f9bdf52e978ca32fb175dfb456a69eae00aefc5cc60ffeaef21" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.4.41" rel="150400.3.13.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.4.40</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.4.41</changelog>
</package>
<package pkgid="511b767d1e4d5d9c9b1bed7f9cc5d0009e35888591af37ed8701228dcc6609f2" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.4.43" rel="150400.3.16.1"/>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
  <changelog author="lslezak@suse.cz" date="1657540800">- Run the registration step early only on the Online installation
  medium which does not provide any packages. On the other media
  run the registration step later.
  Fixes crash in the SLE Micro when the AutoYaST profile enables
  the registration step. (bsc#1200803)
- 4.4.38</changelog>
  <changelog author="kanderssen@suse.com" date="1658491200">- Revert the modification done in version 4.3.97 running the
  initscripts before systed-user-sessions service again once
  systemd fixed logind (bsc#1195059, bsc#1200780)
- 4.4.39</changelog>
  <changelog author="kanderssen@suse.com" date="1664884800">- Add needed packages for the selected network backend in order to
  prevent it is not declared in the software section (bsc#1201235,
  bsc#1201435)
- 4.4.40</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1666612800">- Allow empty values in ask/default, ask/selection/label and
  ask/selection/value elements (bsc#1204448).
- 4.4.41</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1667476800">- Add support for security policies validation (jsc#SLE-24764).
- 4.4.42</changelog>
  <changelog author="jreidinger@suse.com" date="1667908800">- Add needed packages for kdump even when kdump section is not
  defined if product enable kdump by default (bsc#1204180)
- 4.4.43</changelog>
</package>
<package pkgid="a33845f161856c810e77b7e257bdfde3017373de3e0991d188f8e8a44315bf15" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.7" rel="150100.3.21.4"/>
  <changelog author="sbrabec@suse.cz" date="1216382400">- Build glib2, gobject and python stuff separately to break build
  loop cups -&gt; gtk2 -&gt; avahi -&gt; cups.
- Split avahi-python-gtk from avahi-python.
- Updated to version 0.6.23:
  * A lot of translation updates
  * Beef up bnvc quite a bit, including passing a domain to browse
    in
  * Increase numer of open files resource limit to 300 so that we
    can deal with more clients simultaneously.
  * Rework 'poof' algorithm a bit to reduce traffic load on noisy
    links.
  * Build fixes
  * Minor other updates
  * Backwards compatible with Avahi 0.6.x with x &lt; 23.</changelog>
  <changelog author="aj@suse.de" date="1217073600">- Fix requires to require avahi base package.</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="ro@suse.de" date="1217764800">- move fix further up in specfile</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- Added GCC attribute alloc_size markup for allocator functions</changelog>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="eaac712c518a57a4b5327b5c9a69aed036d9a2ff97eb6597d3c46c4c6943a7d1" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.24.4" rel="150200.30.8.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 1.18.212
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.212/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1613649600">- Update to version 1.19.9 (bsc#1182421, bsc#1182422, jsc#ECO-3352, jsc#PM-2485)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.9/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618315200">- Update to version 1.19.50
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.50/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621598400">- Update to version 1.19.75
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.75/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1623844800">- Update to version 1.19.86
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.86/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626868800">- Update to version 1.19.112
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.112/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1627473600">- Update to version 1.20.7 (bsc#1189649)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.20.7/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1627473601">- Update to version 1.20.7
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.20.7/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1631275200">- Update to version 1.20.32
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.20.32/CHANGELOG.rst
- Fix rpmlint warnings
  + use defattr for default permissions
  + mark zsh completion file as a config file
- Use github download url as a Source0
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635508800">- Update to version 1.21.6
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.21.6/CHANGELOG.rst
- Relax upper version dependency for python-docutils in Requires
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1639656000">- Update to version 1.22.24
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.24/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1641470400">- Update to version 1.22.28
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.28/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1642161600">- Update to version 1.22.35
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.35/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1643716800">- Update to version 1.22.46
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.46/CHANGELOG.rst
- Add missing python-rpm-macros to BuildRequires
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1646222400">- Update to version 1.22.65
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.65/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649073600">- Update to version 1.22.87
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.87/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1651060800">- Update to version 1.23.1
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.23.1/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1652356800">- Update to version 1.23.11
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.23.11/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1652788800">- Update to version 1.24.1
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.24.1/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1653048000">- Update to version 1.24.4 (bsc#1199716)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.24.4/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="93cede7a5faa828620f6f96ad50684bd53dc96d48d577d2cebcf6bc1f4512e9c" name="aws-cli" arch="src">
  <version epoch="0" ver="1.24.4" rel="150200.30.8.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 1.18.212
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.18.212/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1613649600">- Update to version 1.19.9 (bsc#1182421, bsc#1182422, jsc#ECO-3352, jsc#PM-2485)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.9/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618315200">- Update to version 1.19.50
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.50/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621598400">- Update to version 1.19.75
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.75/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1623844800">- Update to version 1.19.86
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.86/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626868800">- Update to version 1.19.112
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.19.112/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1627473600">- Update to version 1.20.7 (bsc#1189649)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.20.7/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1627473601">- Update to version 1.20.7
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.20.7/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1631275200">- Update to version 1.20.32
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.20.32/CHANGELOG.rst
- Fix rpmlint warnings
  + use defattr for default permissions
  + mark zsh completion file as a config file
- Use github download url as a Source0
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635508800">- Update to version 1.21.6
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.21.6/CHANGELOG.rst
- Relax upper version dependency for python-docutils in Requires
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1639656000">- Update to version 1.22.24
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.24/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1641470400">- Update to version 1.22.28
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.28/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1642161600">- Update to version 1.22.35
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.35/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1643716800">- Update to version 1.22.46
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.46/CHANGELOG.rst
- Add missing python-rpm-macros to BuildRequires
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1646222400">- Update to version 1.22.65
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.65/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649073600">- Update to version 1.22.87
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.22.87/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1651060800">- Update to version 1.23.1
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.23.1/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1652356800">- Update to version 1.23.11
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.23.11/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1652788800">- Update to version 1.24.1
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.24.1/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1653048000">- Update to version 1.24.4 (bsc#1199716)
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.24.4/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
</package>
<package pkgid="5243cad462949db9a591a77028d9459ebf34320128b7b1b8737bc788091c25cf" name="aws-efs-utils" arch="noarch">
  <version epoch="0" ver="1.31.3" rel="150100.4.5.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1549713600">- Initial build (bsc#1101451, fate#327220, bsc#1124652, fate#327221)
  + Version 1.5</changelog>
  <changelog author="jengelh@inai.de" date="1549886400">- Ensure neutrality of descriptions.</changelog>
  <changelog author="rjschwei@suse.com" date="1550145600">- Support Python 3.2 and later
  + Add efs-switchparser.patch
  + SafeConfigParser is no longer available, use ConfigParser</changelog>
  <changelog author="rjschwei@suse.com" date="1550145601">- Rename from amazon-efs-utils to aws-efs-utils</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1554292800">- Include hardening and robustness fixes from security audit (bsc#1125133)
  + 0001-subprocess-usage-explicitly-pass-close_fds-True.patch
  + 0002-state_file_dir-choose-safe-default-mode-make-mode-co.patch
  + 0003-pytest-adjust-tests-to-new-state_file_dir_mode-confi.patch
  + 0004-choose_tls_port-reuse-socket-and-explicitly-close-it.patch
  + 0005-watchdog-be-robust-against-unrelated-localhost-based.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1554811200">- Update to version 1.7
  + subprocess usage: explicitly pass `close_fds = True`
  + state_file_dir: choose safe default mode, make mode configurable
  + choose_tls_port(): reuse socket and explicitly close it in all cases
  + watchdog: be robust against unrelated localhost based nfs mounts
- Drop hardening patches merged upstream
  + 0001-subprocess-usage-explicitly-pass-close_fds-True.patch
  + 0002-state_file_dir-choose-safe-default-mode-make-mode-co.patch
  + 0003-pytest-adjust-tests-to-new-state_file_dir_mode-confi.patch
  + 0004-choose_tls_port-reuse-socket-and-explicitly-close-it.patch
  + 0005-watchdog-be-robust-against-unrelated-localhost-based.patch
- from version 1.6
  + fix for additional unexpected arguments
  + add test for additional unexpected arguments</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1556020800">- Include in SLE-15 (FATE#327220, bsc#1101451)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1575547200">- Update to version 1.16
  + Support Python 3 for tests
- from version 1.15
  + Properly support Python3
- from version 1.14
  + Tolerate EFS state directory existing during mount
- from version 1.13
  + Change watchdog configuration so it stops after all file systems are unmounted
- from version 1.12
  + Update stunnel idle timeout
  * The default stunnel idle timeout is many hours. By setting it to a value based
    on the NFS lease length we can recover from network partitions sooner.
- from version 1.11
  + Add support for RHEL8
  * Fixes Python shebangs to work on systems without a default "python" version.
  * Fixes watchdog process not being properly started on systemd systems.
- from version 1.10
  + Update to default configuration that disables OCSP
  * To use OCSP, the client accessing EFS must be able to reach the Amazon Certificate
    Authority (CA). To maximize file system availability in the event that the CA is
    not reachable from your VPC, the EFS mount helper no longer enables OCSP by default.
- Don't enable testsuite as it is currently failing
  + https://github.com/aws/efs-utils/issues/24
- Drop patches merged upstream
  + efs-switchparser.patch
- Update BuildRequires from requirements.txt</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1576584000">- Update to version 1.17
  + Added support for Python 3
- Enable testsuite which now passes on Python 3
- Update BuildRequires from requirements.txt</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Drop '-f' option with %service_del_preun/%service_del_postun
  With %service_del_preun, the option is already ignored with as
  support for DISABLE_STOP_ON_REMOVAL has been dropped.
  With %service_del_postun, this option shouldn't be needed besides
  very few special cases. But this package doesn't seem to belong to
  this category.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624536000">- Update to version 1.31.2
  + Handle HTTPError and other unknown exception when fetching IMDS token
  + Support Oracle Enterprise Linux 8
- from version 1.31.1
  + Support fallback to mount with mount target ip address when DNS resolution fails
  + Bump py from 1.8.0 to 1.10.0
- from version 1.30.2
  + Add helper message when config file on instance is not latest
  + Fix the throughput regression due to read_ahead configuration change
    on Linux distribution with kernel version 5.4.x and above
- from version 1.30.1
  + Support mounting to specific AZ mount target
  + Revert "Support mounting to specific AZ mount target"
  + Support mounting to specific AZ mount target
  + Use regional AWS STS endpoints instead of the global endpoint to reduce latency
- from version 1.29.1-mac
  + Fix issue where state files are removed after mount on EC2
    instances running on MacOS Big Sur
  + Add support for EC2 Mac instances running macOS Big Sur
- from version 1.29.1
  + Update the python dependency to python3
  + Fix typo
- from version 1.28.2
  + Fix the issue that mounting with IAM authorization with
    iam role does not work with IMDSv2
- from version 1.28.1
  + Support publishing mount success/failure notification via CloudWatch log
  + filename of .deb-package now includes architecture
- from version 1.27.1
  + Merge PR #60 on GitHub. Adds support for AssumeRoleWithWebIdentity.
  + Add support for AssumeRoleWithWebIdentity
- from version 1.26.3
  + Fix an issue where watchdog crashed during restart because stunnel
    was killed and pid key was removed from state file
- from version 1.26.2
  + Fixes an issue with watchdog where it sometimes fails to restart stunnels in
    efs-csi-driver container * Fixes an issue where fs cannot be mounted with tls
    using systemd.automount-units due to mountpoint check
  + Revert "Fixes an issue with watchdog where it sometimes fails to restart stunnels
    in efs-csi-driver container"
  + Fixes an issue with watchdog where it sometimes fails to restart stunnels in
    efs-csi-driver container
  + Remove non-ascii character in dist/efs-utils.conf
- from version 1.25-3
  + Check if mountpoint is already mounted beforehand for tls mount
  + Bug fix and enhancement, support fedora
- from version 1.25-2
  + Fix python3 IAM role name encoded format, add optional
    override for stunnel log
  + Encode IAM role name to UTF-8
- from version 1.25-1
  + Create self-signed certificate for tls-only mount
  + add CentOS 8 support
- from version 1.24
  + Fix the malformed certificate info
  + bump the release id to 3
  + Use IMDSv1 by default, and use IMDSv2 where required
  + Revert "Use IMDSv1 by default, and fall back to IMDSv2 if necessary"
  + Use IMDSv1 by default, and fall back to IMDSv2 if necessary
  + Modify rhel8-support.sh to handle Fedora as well, and rename it
  + Remove which from DEB package dependency
  + List which as dependency to search command exec path
  + Enable region sourcing from efs-utils configuration file and fix
    stunnel exec path issue in openSUSE
  + Update rpm changelog for v1.23-2, fix circleCI build issue
- from version 1.23
  + Add support for Amazon Elastic Container Service
- from version 1.22
  + Improvements to metadata retrieval and IAM authentication
- from version 1.21
  + Improvements to auth and access point support
- from version 1.20
  + Fixes the mount issue with full DNS name in the AWS China Regions;
    Upgrades unit test coverage version dependency to enable accurate
    python3.8 coverage test
- from version 1.19
  + Added region localization, Integrate repository with CircleCI to enable
    package build visualization, Unit tests bug fixes for python3.5
- from version 1.18
  + Support IAM authentication and access points.
- Add patch to disable mount_efs_test which requires networking
  + disable_mount_efs_test.patch
- Add openssl to BuildRequires, required for testsuite
- Update Requires from requirements.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_amazon-efs-mount-watchdog.service.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 1.31.3 (bsc#1195916)
  + Add skip-styletest.patch
  - Style is enforced upstream and triggers unnecessary build version
    requirements
  + Allow specifying fs_id in cloudwatch log group name
  + Includes fix for stunnel path</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1646827200">- Remove redundant python3 dependency from Requires
- Update regular expression to fix python shebang</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647259200">- Update in SLE-15 (bsc#1195916, bsc#1196696, jsc#PM-3356, jsc#SLE-23972)</changelog>
</package>
<package pkgid="93f9507f41f0aa2edb6ec623821ebaa6b00b2e3ecc3a6668a08d725b5162a67e" name="aws-efs-utils" arch="src">
  <version epoch="0" ver="1.31.3" rel="150100.4.5.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1549713600">- Initial build (bsc#1101451, fate#327220, bsc#1124652, fate#327221)
  + Version 1.5</changelog>
  <changelog author="jengelh@inai.de" date="1549886400">- Ensure neutrality of descriptions.</changelog>
  <changelog author="rjschwei@suse.com" date="1550145600">- Support Python 3.2 and later
  + Add efs-switchparser.patch
  + SafeConfigParser is no longer available, use ConfigParser</changelog>
  <changelog author="rjschwei@suse.com" date="1550145601">- Rename from amazon-efs-utils to aws-efs-utils</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1554292800">- Include hardening and robustness fixes from security audit (bsc#1125133)
  + 0001-subprocess-usage-explicitly-pass-close_fds-True.patch
  + 0002-state_file_dir-choose-safe-default-mode-make-mode-co.patch
  + 0003-pytest-adjust-tests-to-new-state_file_dir_mode-confi.patch
  + 0004-choose_tls_port-reuse-socket-and-explicitly-close-it.patch
  + 0005-watchdog-be-robust-against-unrelated-localhost-based.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1554811200">- Update to version 1.7
  + subprocess usage: explicitly pass `close_fds = True`
  + state_file_dir: choose safe default mode, make mode configurable
  + choose_tls_port(): reuse socket and explicitly close it in all cases
  + watchdog: be robust against unrelated localhost based nfs mounts
- Drop hardening patches merged upstream
  + 0001-subprocess-usage-explicitly-pass-close_fds-True.patch
  + 0002-state_file_dir-choose-safe-default-mode-make-mode-co.patch
  + 0003-pytest-adjust-tests-to-new-state_file_dir_mode-confi.patch
  + 0004-choose_tls_port-reuse-socket-and-explicitly-close-it.patch
  + 0005-watchdog-be-robust-against-unrelated-localhost-based.patch
- from version 1.6
  + fix for additional unexpected arguments
  + add test for additional unexpected arguments</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1556020800">- Include in SLE-15 (FATE#327220, bsc#1101451)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1575547200">- Update to version 1.16
  + Support Python 3 for tests
- from version 1.15
  + Properly support Python3
- from version 1.14
  + Tolerate EFS state directory existing during mount
- from version 1.13
  + Change watchdog configuration so it stops after all file systems are unmounted
- from version 1.12
  + Update stunnel idle timeout
  * The default stunnel idle timeout is many hours. By setting it to a value based
    on the NFS lease length we can recover from network partitions sooner.
- from version 1.11
  + Add support for RHEL8
  * Fixes Python shebangs to work on systems without a default "python" version.
  * Fixes watchdog process not being properly started on systemd systems.
- from version 1.10
  + Update to default configuration that disables OCSP
  * To use OCSP, the client accessing EFS must be able to reach the Amazon Certificate
    Authority (CA). To maximize file system availability in the event that the CA is
    not reachable from your VPC, the EFS mount helper no longer enables OCSP by default.
- Don't enable testsuite as it is currently failing
  + https://github.com/aws/efs-utils/issues/24
- Drop patches merged upstream
  + efs-switchparser.patch
- Update BuildRequires from requirements.txt</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1576584000">- Update to version 1.17
  + Added support for Python 3
- Enable testsuite which now passes on Python 3
- Update BuildRequires from requirements.txt</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Drop '-f' option with %service_del_preun/%service_del_postun
  With %service_del_preun, the option is already ignored with as
  support for DISABLE_STOP_ON_REMOVAL has been dropped.
  With %service_del_postun, this option shouldn't be needed besides
  very few special cases. But this package doesn't seem to belong to
  this category.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624536000">- Update to version 1.31.2
  + Handle HTTPError and other unknown exception when fetching IMDS token
  + Support Oracle Enterprise Linux 8
- from version 1.31.1
  + Support fallback to mount with mount target ip address when DNS resolution fails
  + Bump py from 1.8.0 to 1.10.0
- from version 1.30.2
  + Add helper message when config file on instance is not latest
  + Fix the throughput regression due to read_ahead configuration change
    on Linux distribution with kernel version 5.4.x and above
- from version 1.30.1
  + Support mounting to specific AZ mount target
  + Revert "Support mounting to specific AZ mount target"
  + Support mounting to specific AZ mount target
  + Use regional AWS STS endpoints instead of the global endpoint to reduce latency
- from version 1.29.1-mac
  + Fix issue where state files are removed after mount on EC2
    instances running on MacOS Big Sur
  + Add support for EC2 Mac instances running macOS Big Sur
- from version 1.29.1
  + Update the python dependency to python3
  + Fix typo
- from version 1.28.2
  + Fix the issue that mounting with IAM authorization with
    iam role does not work with IMDSv2
- from version 1.28.1
  + Support publishing mount success/failure notification via CloudWatch log
  + filename of .deb-package now includes architecture
- from version 1.27.1
  + Merge PR #60 on GitHub. Adds support for AssumeRoleWithWebIdentity.
  + Add support for AssumeRoleWithWebIdentity
- from version 1.26.3
  + Fix an issue where watchdog crashed during restart because stunnel
    was killed and pid key was removed from state file
- from version 1.26.2
  + Fixes an issue with watchdog where it sometimes fails to restart stunnels in
    efs-csi-driver container * Fixes an issue where fs cannot be mounted with tls
    using systemd.automount-units due to mountpoint check
  + Revert "Fixes an issue with watchdog where it sometimes fails to restart stunnels
    in efs-csi-driver container"
  + Fixes an issue with watchdog where it sometimes fails to restart stunnels in
    efs-csi-driver container
  + Remove non-ascii character in dist/efs-utils.conf
- from version 1.25-3
  + Check if mountpoint is already mounted beforehand for tls mount
  + Bug fix and enhancement, support fedora
- from version 1.25-2
  + Fix python3 IAM role name encoded format, add optional
    override for stunnel log
  + Encode IAM role name to UTF-8
- from version 1.25-1
  + Create self-signed certificate for tls-only mount
  + add CentOS 8 support
- from version 1.24
  + Fix the malformed certificate info
  + bump the release id to 3
  + Use IMDSv1 by default, and use IMDSv2 where required
  + Revert "Use IMDSv1 by default, and fall back to IMDSv2 if necessary"
  + Use IMDSv1 by default, and fall back to IMDSv2 if necessary
  + Modify rhel8-support.sh to handle Fedora as well, and rename it
  + Remove which from DEB package dependency
  + List which as dependency to search command exec path
  + Enable region sourcing from efs-utils configuration file and fix
    stunnel exec path issue in openSUSE
  + Update rpm changelog for v1.23-2, fix circleCI build issue
- from version 1.23
  + Add support for Amazon Elastic Container Service
- from version 1.22
  + Improvements to metadata retrieval and IAM authentication
- from version 1.21
  + Improvements to auth and access point support
- from version 1.20
  + Fixes the mount issue with full DNS name in the AWS China Regions;
    Upgrades unit test coverage version dependency to enable accurate
    python3.8 coverage test
- from version 1.19
  + Added region localization, Integrate repository with CircleCI to enable
    package build visualization, Unit tests bug fixes for python3.5
- from version 1.18
  + Support IAM authentication and access points.
- Add patch to disable mount_efs_test which requires networking
  + disable_mount_efs_test.patch
- Add openssl to BuildRequires, required for testsuite
- Update Requires from requirements.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_amazon-efs-mount-watchdog.service.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 1.31.3 (bsc#1195916)
  + Add skip-styletest.patch
  - Style is enforced upstream and triggers unnecessary build version
    requirements
  + Allow specifying fs_id in cloudwatch log group name
  + Includes fix for stunnel path</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1646827200">- Remove redundant python3 dependency from Requires
- Update regular expression to fix python shebang</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647259200">- Update in SLE-15 (bsc#1195916, bsc#1196696, jsc#PM-3356, jsc#SLE-23972)</changelog>
</package>
<package pkgid="d7a6a1070e46060875bc0c7a8c970cca676410e0a47e5cea700b8c29e2639dc6" name="aws-efs-utils" arch="noarch">
  <version epoch="0" ver="1.33.4" rel="150100.4.8.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1549713600">- Initial build (bsc#1101451, fate#327220, bsc#1124652, fate#327221)
  + Version 1.5</changelog>
  <changelog author="jengelh@inai.de" date="1549886400">- Ensure neutrality of descriptions.</changelog>
  <changelog author="rjschwei@suse.com" date="1550145600">- Support Python 3.2 and later
  + Add efs-switchparser.patch
  + SafeConfigParser is no longer available, use ConfigParser</changelog>
  <changelog author="rjschwei@suse.com" date="1550145601">- Rename from amazon-efs-utils to aws-efs-utils</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1554292800">- Include hardening and robustness fixes from security audit (bsc#1125133)
  + 0001-subprocess-usage-explicitly-pass-close_fds-True.patch
  + 0002-state_file_dir-choose-safe-default-mode-make-mode-co.patch
  + 0003-pytest-adjust-tests-to-new-state_file_dir_mode-confi.patch
  + 0004-choose_tls_port-reuse-socket-and-explicitly-close-it.patch
  + 0005-watchdog-be-robust-against-unrelated-localhost-based.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1554811200">- Update to version 1.7
  + subprocess usage: explicitly pass `close_fds = True`
  + state_file_dir: choose safe default mode, make mode configurable
  + choose_tls_port(): reuse socket and explicitly close it in all cases
  + watchdog: be robust against unrelated localhost based nfs mounts
- Drop hardening patches merged upstream
  + 0001-subprocess-usage-explicitly-pass-close_fds-True.patch
  + 0002-state_file_dir-choose-safe-default-mode-make-mode-co.patch
  + 0003-pytest-adjust-tests-to-new-state_file_dir_mode-confi.patch
  + 0004-choose_tls_port-reuse-socket-and-explicitly-close-it.patch
  + 0005-watchdog-be-robust-against-unrelated-localhost-based.patch
- from version 1.6
  + fix for additional unexpected arguments
  + add test for additional unexpected arguments</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1556020800">- Include in SLE-15 (FATE#327220, bsc#1101451)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1575547200">- Update to version 1.16
  + Support Python 3 for tests
- from version 1.15
  + Properly support Python3
- from version 1.14
  + Tolerate EFS state directory existing during mount
- from version 1.13
  + Change watchdog configuration so it stops after all file systems are unmounted
- from version 1.12
  + Update stunnel idle timeout
  * The default stunnel idle timeout is many hours. By setting it to a value based
    on the NFS lease length we can recover from network partitions sooner.
- from version 1.11
  + Add support for RHEL8
  * Fixes Python shebangs to work on systems without a default "python" version.
  * Fixes watchdog process not being properly started on systemd systems.
- from version 1.10
  + Update to default configuration that disables OCSP
  * To use OCSP, the client accessing EFS must be able to reach the Amazon Certificate
    Authority (CA). To maximize file system availability in the event that the CA is
    not reachable from your VPC, the EFS mount helper no longer enables OCSP by default.
- Don't enable testsuite as it is currently failing
  + https://github.com/aws/efs-utils/issues/24
- Drop patches merged upstream
  + efs-switchparser.patch
- Update BuildRequires from requirements.txt</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1576584000">- Update to version 1.17
  + Added support for Python 3
- Enable testsuite which now passes on Python 3
- Update BuildRequires from requirements.txt</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Drop '-f' option with %service_del_preun/%service_del_postun
  With %service_del_preun, the option is already ignored with as
  support for DISABLE_STOP_ON_REMOVAL has been dropped.
  With %service_del_postun, this option shouldn't be needed besides
  very few special cases. But this package doesn't seem to belong to
  this category.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624536000">- Update to version 1.31.2
  + Handle HTTPError and other unknown exception when fetching IMDS token
  + Support Oracle Enterprise Linux 8
- from version 1.31.1
  + Support fallback to mount with mount target ip address when DNS resolution fails
  + Bump py from 1.8.0 to 1.10.0
- from version 1.30.2
  + Add helper message when config file on instance is not latest
  + Fix the throughput regression due to read_ahead configuration change
    on Linux distribution with kernel version 5.4.x and above
- from version 1.30.1
  + Support mounting to specific AZ mount target
  + Revert "Support mounting to specific AZ mount target"
  + Support mounting to specific AZ mount target
  + Use regional AWS STS endpoints instead of the global endpoint to reduce latency
- from version 1.29.1-mac
  + Fix issue where state files are removed after mount on EC2
    instances running on MacOS Big Sur
  + Add support for EC2 Mac instances running macOS Big Sur
- from version 1.29.1
  + Update the python dependency to python3
  + Fix typo
- from version 1.28.2
  + Fix the issue that mounting with IAM authorization with
    iam role does not work with IMDSv2
- from version 1.28.1
  + Support publishing mount success/failure notification via CloudWatch log
  + filename of .deb-package now includes architecture
- from version 1.27.1
  + Merge PR #60 on GitHub. Adds support for AssumeRoleWithWebIdentity.
  + Add support for AssumeRoleWithWebIdentity
- from version 1.26.3
  + Fix an issue where watchdog crashed during restart because stunnel
    was killed and pid key was removed from state file
- from version 1.26.2
  + Fixes an issue with watchdog where it sometimes fails to restart stunnels in
    efs-csi-driver container * Fixes an issue where fs cannot be mounted with tls
    using systemd.automount-units due to mountpoint check
  + Revert "Fixes an issue with watchdog where it sometimes fails to restart stunnels
    in efs-csi-driver container"
  + Fixes an issue with watchdog where it sometimes fails to restart stunnels in
    efs-csi-driver container
  + Remove non-ascii character in dist/efs-utils.conf
- from version 1.25-3
  + Check if mountpoint is already mounted beforehand for tls mount
  + Bug fix and enhancement, support fedora
- from version 1.25-2
  + Fix python3 IAM role name encoded format, add optional
    override for stunnel log
  + Encode IAM role name to UTF-8
- from version 1.25-1
  + Create self-signed certificate for tls-only mount
  + add CentOS 8 support
- from version 1.24
  + Fix the malformed certificate info
  + bump the release id to 3
  + Use IMDSv1 by default, and use IMDSv2 where required
  + Revert "Use IMDSv1 by default, and fall back to IMDSv2 if necessary"
  + Use IMDSv1 by default, and fall back to IMDSv2 if necessary
  + Modify rhel8-support.sh to handle Fedora as well, and rename it
  + Remove which from DEB package dependency
  + List which as dependency to search command exec path
  + Enable region sourcing from efs-utils configuration file and fix
    stunnel exec path issue in openSUSE
  + Update rpm changelog for v1.23-2, fix circleCI build issue
- from version 1.23
  + Add support for Amazon Elastic Container Service
- from version 1.22
  + Improvements to metadata retrieval and IAM authentication
- from version 1.21
  + Improvements to auth and access point support
- from version 1.20
  + Fixes the mount issue with full DNS name in the AWS China Regions;
    Upgrades unit test coverage version dependency to enable accurate
    python3.8 coverage test
- from version 1.19
  + Added region localization, Integrate repository with CircleCI to enable
    package build visualization, Unit tests bug fixes for python3.5
- from version 1.18
  + Support IAM authentication and access points.
- Add patch to disable mount_efs_test which requires networking
  + disable_mount_efs_test.patch
- Add openssl to BuildRequires, required for testsuite
- Update Requires from requirements.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_amazon-efs-mount-watchdog.service.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 1.31.3 (bsc#1195916)
  + Add skip-styletest.patch
  - Style is enforced upstream and triggers unnecessary build version
    requirements
  + Allow specifying fs_id in cloudwatch log group name
  + Includes fix for stunnel path</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1646827200">- Remove redundant python3 dependency from Requires
- Update regular expression to fix python shebang</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647259200">- Update in SLE-15 (bsc#1195916, bsc#1196696, jsc#PM-3356, jsc#SLE-23972)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- version update to 1.32.1
  * Enable watchdog to check stunnel health periodically and restart
    hanging stunnel process when necessary.
- do not require python-mock for build
  https://trello.com/c/S6eADbii/64-remove-python-mock</changelog>
  <changelog author="pgajdos@suse.com" date="1652875200">- version update to 1.33.1
  * Enable mount process to retry on failed or timed out mount.nfs command
  * use unittest.mock instead of mock</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663934400">- Update to version 1.33.4 (bsc#1203170)
  * Fix the issue where watchdog sending signal to incorrect
    processes and add FIPS mode support
  * Apply additional check on awscredsuri option
- from version 1.33.3
  * Fix the potential stunnel hanging issue caused by full
    subprocess PIPE filled by stunnel log
  * Specify FIPS mode in configuration
  * Add separate env_path for macOS; Add comments
  * Update get-pip.py download url in README
- from version 1.33.2
  * Fix the incorrect path to generate read_ahead_kb config file
    and Bump the default tls port range from 400 to 1000
- Add patch to use unittest.mock instead of mock in testsuite
  * use_mock_from_unittest.patch
- Use relative URL in Source field</changelog>
</package>
<package pkgid="bf43815920882f74eae69b29fafe278dd15ddc7c72e999df078ca52b65d295ce" name="aws-efs-utils" arch="src">
  <version epoch="0" ver="1.33.4" rel="150100.4.8.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1549713600">- Initial build (bsc#1101451, fate#327220, bsc#1124652, fate#327221)
  + Version 1.5</changelog>
  <changelog author="jengelh@inai.de" date="1549886400">- Ensure neutrality of descriptions.</changelog>
  <changelog author="rjschwei@suse.com" date="1550145600">- Support Python 3.2 and later
  + Add efs-switchparser.patch
  + SafeConfigParser is no longer available, use ConfigParser</changelog>
  <changelog author="rjschwei@suse.com" date="1550145601">- Rename from amazon-efs-utils to aws-efs-utils</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1554292800">- Include hardening and robustness fixes from security audit (bsc#1125133)
  + 0001-subprocess-usage-explicitly-pass-close_fds-True.patch
  + 0002-state_file_dir-choose-safe-default-mode-make-mode-co.patch
  + 0003-pytest-adjust-tests-to-new-state_file_dir_mode-confi.patch
  + 0004-choose_tls_port-reuse-socket-and-explicitly-close-it.patch
  + 0005-watchdog-be-robust-against-unrelated-localhost-based.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1554811200">- Update to version 1.7
  + subprocess usage: explicitly pass `close_fds = True`
  + state_file_dir: choose safe default mode, make mode configurable
  + choose_tls_port(): reuse socket and explicitly close it in all cases
  + watchdog: be robust against unrelated localhost based nfs mounts
- Drop hardening patches merged upstream
  + 0001-subprocess-usage-explicitly-pass-close_fds-True.patch
  + 0002-state_file_dir-choose-safe-default-mode-make-mode-co.patch
  + 0003-pytest-adjust-tests-to-new-state_file_dir_mode-confi.patch
  + 0004-choose_tls_port-reuse-socket-and-explicitly-close-it.patch
  + 0005-watchdog-be-robust-against-unrelated-localhost-based.patch
- from version 1.6
  + fix for additional unexpected arguments
  + add test for additional unexpected arguments</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1556020800">- Include in SLE-15 (FATE#327220, bsc#1101451)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1575547200">- Update to version 1.16
  + Support Python 3 for tests
- from version 1.15
  + Properly support Python3
- from version 1.14
  + Tolerate EFS state directory existing during mount
- from version 1.13
  + Change watchdog configuration so it stops after all file systems are unmounted
- from version 1.12
  + Update stunnel idle timeout
  * The default stunnel idle timeout is many hours. By setting it to a value based
    on the NFS lease length we can recover from network partitions sooner.
- from version 1.11
  + Add support for RHEL8
  * Fixes Python shebangs to work on systems without a default "python" version.
  * Fixes watchdog process not being properly started on systemd systems.
- from version 1.10
  + Update to default configuration that disables OCSP
  * To use OCSP, the client accessing EFS must be able to reach the Amazon Certificate
    Authority (CA). To maximize file system availability in the event that the CA is
    not reachable from your VPC, the EFS mount helper no longer enables OCSP by default.
- Don't enable testsuite as it is currently failing
  + https://github.com/aws/efs-utils/issues/24
- Drop patches merged upstream
  + efs-switchparser.patch
- Update BuildRequires from requirements.txt</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1576584000">- Update to version 1.17
  + Added support for Python 3
- Enable testsuite which now passes on Python 3
- Update BuildRequires from requirements.txt</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Drop '-f' option with %service_del_preun/%service_del_postun
  With %service_del_preun, the option is already ignored with as
  support for DISABLE_STOP_ON_REMOVAL has been dropped.
  With %service_del_postun, this option shouldn't be needed besides
  very few special cases. But this package doesn't seem to belong to
  this category.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624536000">- Update to version 1.31.2
  + Handle HTTPError and other unknown exception when fetching IMDS token
  + Support Oracle Enterprise Linux 8
- from version 1.31.1
  + Support fallback to mount with mount target ip address when DNS resolution fails
  + Bump py from 1.8.0 to 1.10.0
- from version 1.30.2
  + Add helper message when config file on instance is not latest
  + Fix the throughput regression due to read_ahead configuration change
    on Linux distribution with kernel version 5.4.x and above
- from version 1.30.1
  + Support mounting to specific AZ mount target
  + Revert "Support mounting to specific AZ mount target"
  + Support mounting to specific AZ mount target
  + Use regional AWS STS endpoints instead of the global endpoint to reduce latency
- from version 1.29.1-mac
  + Fix issue where state files are removed after mount on EC2
    instances running on MacOS Big Sur
  + Add support for EC2 Mac instances running macOS Big Sur
- from version 1.29.1
  + Update the python dependency to python3
  + Fix typo
- from version 1.28.2
  + Fix the issue that mounting with IAM authorization with
    iam role does not work with IMDSv2
- from version 1.28.1
  + Support publishing mount success/failure notification via CloudWatch log
  + filename of .deb-package now includes architecture
- from version 1.27.1
  + Merge PR #60 on GitHub. Adds support for AssumeRoleWithWebIdentity.
  + Add support for AssumeRoleWithWebIdentity
- from version 1.26.3
  + Fix an issue where watchdog crashed during restart because stunnel
    was killed and pid key was removed from state file
- from version 1.26.2
  + Fixes an issue with watchdog where it sometimes fails to restart stunnels in
    efs-csi-driver container * Fixes an issue where fs cannot be mounted with tls
    using systemd.automount-units due to mountpoint check
  + Revert "Fixes an issue with watchdog where it sometimes fails to restart stunnels
    in efs-csi-driver container"
  + Fixes an issue with watchdog where it sometimes fails to restart stunnels in
    efs-csi-driver container
  + Remove non-ascii character in dist/efs-utils.conf
- from version 1.25-3
  + Check if mountpoint is already mounted beforehand for tls mount
  + Bug fix and enhancement, support fedora
- from version 1.25-2
  + Fix python3 IAM role name encoded format, add optional
    override for stunnel log
  + Encode IAM role name to UTF-8
- from version 1.25-1
  + Create self-signed certificate for tls-only mount
  + add CentOS 8 support
- from version 1.24
  + Fix the malformed certificate info
  + bump the release id to 3
  + Use IMDSv1 by default, and use IMDSv2 where required
  + Revert "Use IMDSv1 by default, and fall back to IMDSv2 if necessary"
  + Use IMDSv1 by default, and fall back to IMDSv2 if necessary
  + Modify rhel8-support.sh to handle Fedora as well, and rename it
  + Remove which from DEB package dependency
  + List which as dependency to search command exec path
  + Enable region sourcing from efs-utils configuration file and fix
    stunnel exec path issue in openSUSE
  + Update rpm changelog for v1.23-2, fix circleCI build issue
- from version 1.23
  + Add support for Amazon Elastic Container Service
- from version 1.22
  + Improvements to metadata retrieval and IAM authentication
- from version 1.21
  + Improvements to auth and access point support
- from version 1.20
  + Fixes the mount issue with full DNS name in the AWS China Regions;
    Upgrades unit test coverage version dependency to enable accurate
    python3.8 coverage test
- from version 1.19
  + Added region localization, Integrate repository with CircleCI to enable
    package build visualization, Unit tests bug fixes for python3.5
- from version 1.18
  + Support IAM authentication and access points.
- Add patch to disable mount_efs_test which requires networking
  + disable_mount_efs_test.patch
- Add openssl to BuildRequires, required for testsuite
- Update Requires from requirements.txt</changelog>
  <changelog author="jsegitz@suse.com" date="1628683200">- Added hardening to systemd service(s). Added patch(es):
  * harden_amazon-efs-mount-watchdog.service.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 1.31.3 (bsc#1195916)
  + Add skip-styletest.patch
  - Style is enforced upstream and triggers unnecessary build version
    requirements
  + Allow specifying fs_id in cloudwatch log group name
  + Includes fix for stunnel path</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1646827200">- Remove redundant python3 dependency from Requires
- Update regular expression to fix python shebang</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647259200">- Update in SLE-15 (bsc#1195916, bsc#1196696, jsc#PM-3356, jsc#SLE-23972)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- version update to 1.32.1
  * Enable watchdog to check stunnel health periodically and restart
    hanging stunnel process when necessary.
- do not require python-mock for build
  https://trello.com/c/S6eADbii/64-remove-python-mock</changelog>
  <changelog author="pgajdos@suse.com" date="1652875200">- version update to 1.33.1
  * Enable mount process to retry on failed or timed out mount.nfs command
  * use unittest.mock instead of mock</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663934400">- Update to version 1.33.4 (bsc#1203170)
  * Fix the issue where watchdog sending signal to incorrect
    processes and add FIPS mode support
  * Apply additional check on awscredsuri option
- from version 1.33.3
  * Fix the potential stunnel hanging issue caused by full
    subprocess PIPE filled by stunnel log
  * Specify FIPS mode in configuration
  * Add separate env_path for macOS; Add comments
  * Update get-pip.py download url in README
- from version 1.33.2
  * Fix the incorrect path to generate read_ahead_kb config file
    and Bump the default tls port range from 400 to 1000
- Add patch to use unittest.mock instead of mock in testsuite
  * use_mock_from_unittest.patch
- Use relative URL in Source field</changelog>
</package>
<package pkgid="3cb8fbdc66e931032f4f1e46a74fce2cada5d14b5b06546e6101fccfb8efa05d" name="aws-iam-authenticator" arch="aarch64">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="8fd3f04d3e5c030b3629e9b83614c1380b452bf1ed04296839a63c2ffd9f85a5" name="aws-iam-authenticator" arch="ppc64le">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="a9e9493d13d32ef5d1aebead3aaf016ce4f5753263697876c63f5425432f5921" name="aws-iam-authenticator" arch="s390x">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="fc4a02eea496a53058911e4d2457df51e5de5ea14fdc0a05621697efbf59d28e" name="aws-iam-authenticator" arch="src">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="858579a5d95215060a1daa4fd6a08a34c9c14816f0c944b32b6cc37a6d0b338e" name="aws-iam-authenticator" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="96b5d957e36fe17d4b2351d0edee84172244574b270000ffc6b4ab81d2e43095" name="aws-iam-authenticator" arch="aarch64">
  <version epoch="0" ver="0.5.3" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1657627200">- Add patch to fix AccessKeyID validation bypass (bsc#1201395, CVE-2022-2385)
  * 0001-Add-query-parameter-validation-for-multiple-parameters.patch</changelog>
</package>
<package pkgid="4678d34a8d31b9489a30a64eb5c93ddd3c26cb97863cf5fc57349739b27491e5" name="aws-iam-authenticator" arch="ppc64le">
  <version epoch="0" ver="0.5.3" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1657627200">- Add patch to fix AccessKeyID validation bypass (bsc#1201395, CVE-2022-2385)
  * 0001-Add-query-parameter-validation-for-multiple-parameters.patch</changelog>
</package>
<package pkgid="6a8518ccc0fd612292e2b1a1fbffd118e3a441b13c51d514de817fa0a4cf3094" name="aws-iam-authenticator" arch="s390x">
  <version epoch="0" ver="0.5.3" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1657627200">- Add patch to fix AccessKeyID validation bypass (bsc#1201395, CVE-2022-2385)
  * 0001-Add-query-parameter-validation-for-multiple-parameters.patch</changelog>
</package>
<package pkgid="f1ec37b23d3c1fda038e4bf39bff8696085832fe01b86b6d0338bcf707c1471b" name="aws-iam-authenticator" arch="src">
  <version epoch="0" ver="0.5.3" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1657627200">- Add patch to fix AccessKeyID validation bypass (bsc#1201395, CVE-2022-2385)
  * 0001-Add-query-parameter-validation-for-multiple-parameters.patch</changelog>
</package>
<package pkgid="2024b87af95c100fb41c66ed34f2651394ee43794d3aea9dfbe07f335b889d62" name="aws-iam-authenticator" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="150000.1.9.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1657627200">- Add patch to fix AccessKeyID validation bypass (bsc#1201395, CVE-2022-2385)
  * 0001-Add-query-parameter-validation-for-multiple-parameters.patch</changelog>
</package>
<package pkgid="6e896b24b2f90720f2dd0deb1ee8b2a0bf202519fd4d476293627742c6f29d1f" name="azure-cli" arch="noarch">
  <version epoch="0" ver="2.17.1" rel="150100.6.11.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Add missing python-rpm-macros to BuildRequires</changelog>
</package>
<package pkgid="f6a93ef4e6108153fe967c01407a1832123e2a30f00b4758ed761350dc19d8b0" name="azure-cli" arch="src">
  <version epoch="0" ver="2.17.1" rel="150100.6.11.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Add missing python-rpm-macros to BuildRequires</changelog>
</package>
<package pkgid="fe33fec8024827ef8e56d755f896b504f6f25d42f4eaf4718d449d93f5d40015" name="azure-cli-core" arch="noarch">
  <version epoch="0" ver="2.17.1" rel="150100.6.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Relax version dependency for python-humanfriendly in Requires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Add patch to disable automatic check for updates (boo#1175289)
  + acc_disable-update-check.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Override upstream version in Requires for python-azure-mgmt-resource</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605614400">- Lower version dependency for python-azure-mgmt-resource to &gt;= 10.0.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Refresh patches for new version
  + acc_disable-update-check.patch
- Update Requires from setup.py
  + Temporarily use a vendored copy of azure-mgmt-resource</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Fix regression in patch to disable update check (bsc#1192671)
  + acc_disable-update-check.patch</changelog>
</package>
<package pkgid="0a9deff0378c1bff53044afd58db6f5c40e69e4dea71f008a35e5666e7b8f9c5" name="azure-cli-core" arch="src">
  <version epoch="0" ver="2.17.1" rel="150100.6.14.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1582545600">- New upstream release
  + Version 2.1.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Relax version dependency for python-humanfriendly in Requires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1583841600">- New upstream release
  + Version 2.2.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Add patch to disable automatic check for updates (boo#1175289)
  + acc_disable-update-check.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Override upstream version in Requires for python-azure-mgmt-resource</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605614400">- Lower version dependency for python-azure-mgmt-resource to &gt;= 10.0.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Refresh patches for new version
  + acc_disable-update-check.patch
- Update Requires from setup.py
  + Temporarily use a vendored copy of azure-mgmt-resource</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Fix regression in patch to disable update check (bsc#1192671)
  + acc_disable-update-check.patch</changelog>
</package>
<package pkgid="48e34dc48aecdbfbae13b5ea619b7d3fee4ad9f1d4fe6cfadf67564af7067f97" name="azure-cli-test" arch="aarch64">
  <version epoch="0" ver="2.17.1" rel="150100.6.11.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Add missing python-rpm-macros to BuildRequires</changelog>
</package>
<package pkgid="972777de9d01d8e5ce9834af610b863c6a695faeacbf0d7e2830810ca3d617d3" name="azure-cli-test" arch="ppc64le">
  <version epoch="0" ver="2.17.1" rel="150100.6.11.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Add missing python-rpm-macros to BuildRequires</changelog>
</package>
<package pkgid="b5223e71c1ef84e226c87ad9298d8b59b2dc1ee83299a7ffee2834aceacc86ca" name="azure-cli-test" arch="s390x">
  <version epoch="0" ver="2.17.1" rel="150100.6.11.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Add missing python-rpm-macros to BuildRequires</changelog>
</package>
<package pkgid="02d1e1d736ff55880d4af0c823ce9267b6c0ce1a37d49eeeae8ab690cbc936f0" name="azure-cli-test" arch="src">
  <version epoch="0" ver="2.17.1" rel="150100.6.11.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Add missing python-rpm-macros to BuildRequires</changelog>
</package>
<package pkgid="da7e8172c90601d54195496c0b688350eed73ee968749e86de17fad376411ee8" name="azure-cli-test" arch="x86_64">
  <version epoch="0" ver="2.17.1" rel="150100.6.11.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1584964800">- Update in SLE-15 (bsc#1140565, jsc#ECO-1257, jsc#PM-1598)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1585828800">- New upstream release
  + Version 2.3.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588852800">- New upstream release
  + Version 2.5.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- New upstream release
  + Version 2.7.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1595246400">- New upstream release
  + Version 2.9.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1597752000">- New upstream release (boo#1175289)
  + Version 2.10.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598875200">- New upstream release
  + Version 2.11.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Set version dependency for azure-cli-core to %{version}
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1600776000">- New upstream release (bsc#1176784, bsc#1176785)
  + Version 2.12.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601467200">- New upstream release
  + Version 2.12.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602590400">- New upstream release
  + Version 2.13.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update BuildRequires and Requires from setup.py</changelog>
  <changelog author="olaf@aepfle.de" date="1604318400">- Remove trailing .sh suffix from bash-completion to make sure
  az is actually recognized as a command with completions
  Drop also the string 'completion' from resulting filename</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605528000">- New upstream release
  + Version 2.14.2
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Remove bogus dependencies from BuildRequires
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1605700800">- New upstream release
  + Version 2.15.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Remove bogus python-mock dependency from Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608033600">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1608120000">- New upstream release
  + Version 2.16.0
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610107200">- New upstream release
  + Version 2.17.1
  + For detailed information about changes see the
    HISTORY.rst file provided with this package
- Update Requires from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626177600">- Add missing python3-azure-mgmt-resource dependency to Requires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626264000">- Update in SLE-15 (bsc#1187880, bsc#1188178)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1635163200">- Update in SLE-15 (bsc#1189411, bsc#1191482)
- Add missing python-rpm-macros to BuildRequires</changelog>
</package>
<package pkgid="25312061f297a8dd2bfef632cbf37847f13eb387576840506882aeedfa33b56e" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.7" rel="150000.4.9.1"/>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="werner@suse.de" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="werner@suse.de" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
</package>
<package pkgid="d3e141566be341719c1791f067287646d457fae00e2efb72bb3147567ef86dba" name="bash-completion" arch="src">
  <version epoch="0" ver="2.7" rel="150000.4.9.1"/>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="werner@suse.de" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="werner@suse.de" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
</package>
<package pkgid="cac1c9efaf70593d074c83f5579a540b397c8a3613a566114930d85bdc072cdc" name="bash-completion" arch="noarch">
  <version epoch="0" ver="2.7" rel="150400.13.3.1"/>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="werner@suse.de" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="werner@suse.de" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
</package>
<package pkgid="9cd97829612548eb8a4b2f9ea7a22de1e2c723d84bebb4fef088142780880b1e" name="bash-completion" arch="src">
  <version epoch="0" ver="2.7" rel="150400.13.3.1"/>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="werner@suse.de" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="werner@suse.de" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
</package>
<package pkgid="068c7b566b6cfa4c90ac77b2ed34066797bcbcf014c78bbc100171bca294f797" name="bash-completion-devel" arch="noarch">
  <version epoch="0" ver="2.7" rel="150000.4.9.1"/>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="werner@suse.de" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="werner@suse.de" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
</package>
<package pkgid="5163db62937df08efb2c82af119ac90a707b59cdb6f9e62534b20926fa34e0be" name="bash-completion-devel" arch="noarch">
  <version epoch="0" ver="2.7" rel="150400.13.3.1"/>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Remove rfkill conflicting with util-linux-2.31.</changelog>
  <changelog author="werner@suse.de" date="1540209600">- Modify patch PS1-completion-boo903362.patch to make it work with
  mksh as well (boo#1104531)</changelog>
  <changelog author="werner@suse.de" date="1633348800">- Add patch boo1190929-9af4afd0.patch for boo#1190929
  modinfo completion fails to recognize .ko.xz</changelog>
  <changelog author="werner@suse.de" date="1653307200">- Add patch bsc1199724-modules.patch (bsc#1199724)
  * Enable upstream commit to list ko.zst modules as well</changelog>
  <changelog author="otto.hollmann@suse.com" date="1658836800">- Add patch fix-curl-help-completion-bsc1200791.patch (bsc#1200791)
  * List all options for `curl --&lt;TAB&gt;`</changelog>
</package>
<package pkgid="0d90841a2d1fa0c4919eb7cbb689a981ad8ac5affb1e32051b03c6c71ef5bbc8" name="bash-completion-doc" arch="noarch">
  <version epoch="0" ver="2.7" rel="150000.4.9.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="90b799a93507398894475c0ca61eef3f574fb66739d4b295e2b8d3e385225540" name="bash-completion-doc" arch="src">
  <version epoch="0" ver="2.7" rel="150000.4.9.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="8ff2df06dd5ec268aff9a65c6bcb1b29b4b43af5b5452881dedb514dcf605a95" name="bash-completion-doc" arch="noarch">
  <version epoch="0" ver="2.7" rel="150400.13.3.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="6d1e51f10561070b8e09295753597a81ac49a656701760a8ba6cf513bc212e75" name="bash-completion-doc" arch="src">
  <version epoch="0" ver="2.7" rel="150400.13.3.1"/>
  <changelog author="werner@suse.de" date="1416225600">- Add patch PS1-completion-boo903362.patch to avoid trouble if
  restricted characters of the shell are used in PS1 like
  exclamation mark (boo#903362).
- Add patch FOO-dir-completion-boo905348.patch to expand variables
  which value is actual a directory to avoid excaped dollar sign
  (boo#905348).</changelog>
  <changelog author="werner@suse.de" date="1426680000">- Port my dollar completion from /etc/profile.d/completion.bash to
  bash_completion which modifies FOO-dir-completion-boo905348.patch
- Avoid negative cword position counter (boo#922758), this adds
  the patch init-completion-boo922758.patch</changelog>
  <changelog author="werner@suse.de" date="1434369600">- Add patch ls-completion-boo889319.patch to make ls completion
  more smart (boo#889319)</changelog>
  <changelog author="werner@suse.de" date="1439380800">- Correct typo in patch ls-completion-boo889319.patch</changelog>
  <changelog author="werner@suse.de" date="1439467200">- Add patch backtick-completion-boo940835.patch to allow correct
  backtick completion (boo#940835)</changelog>
  <changelog author="werner@suse.de" date="1443009600">- Add patch LVM-completion-bsc946875.patch to make LVM comands
  work even without any scan happen (bsc#946875)</changelog>
  <changelog author="werner@suse.de" date="1450440000">- Add patch respect-variables-boo940837.patch to avoid completions
  which results in e.g. ls \$HO
- Add patch rm-completion-smart-boo958462.patch to allow completions
  list e.g. rm prefix*.jpg&lt;TAB&gt;&lt;TAB&gt;
- Modify patch LVM-completion-bsc946875.patch that is add the
  new patch from Liuhua Wang</changelog>
  <changelog author="werner@suse.de" date="1453896000">- Add patch backticks-bsc963140.patch to handle sub commands
  which will be expanded by backticks (bsc#963140)</changelog>
  <changelog author="werner@suse.de" date="1461758400">- Add documentation for this packages below to get the reference
  of the e.g. the variable COMP_FILEDIR_FALLBACK (boo#977336)</changelog>
  <changelog author="werner@suse.de" date="1461758401">- Add patch sh-script-completion-boo977336.patch to make _filedir
  work with COMP_FILEDIR_FALLBACK even if local directries exists
  this is for bug boo##977336</changelog>
  <changelog author="sbrabec@suse.com" date="1461758402">- Remove completions conflicting with util-linux (boo#977259#c3).</changelog>
  <changelog author="werner@suse.de" date="1463572800">- Split off sub packages devel and doc to avoid dependency cycles</changelog>
  <changelog author="sbrabec@suse.com" date="1463572801">- Split doc build into a separate spec file. It makes possible to
  build package in two stages and prevent build loop.</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Mark the documentation as noarch</changelog>
  <changelog author="werner@suse.de" date="1481716800">- Change upstream home to https://github.com/scop/bash-completion
- Update to version 2.4
  * xetex, xelatex, luatex, lualatex: Associate with tex files
  * Support pod document files for perldoc (#39)
  * tipc: add tipc completions
  * rpm: Offer --filetriggers with -q
  * javadoc: Add bunch of option arg (non)completions
  * lrzip: Add -m arg noncompletion
  * pypy*: Add basic --jit arg completion
  * pypy3: Alias to python
  * hcitool,svcadm,tar: Spelling fixes
  * tipc: Invoke ls with "command"
  * tipc: Indentation fix
  * abook: Parse long options from command including full path
  * pyvenv: New completion
  * chroot: New (generic long options) completion, see #38
  * aptitude: List packages using _apt_cache_packages, fixes #33
  * vncviewer: Cleanup shopt use, drop an eval
  * make: Avoid a grep
  * rpm: Fix --whatenhances arg completion
  * aspell, minicom, mysql: Replace use of ls with printf
  * The BitKeeper completion used the wrong set of commands
  * Completion for python zip archives
  * lvm: pvcreate should be able to use all block devcices
  * lvm: fix all commands that should get all PVs
  * tar: Detect GNU/other from --version only once per session
  * tar: Remove unused variable
  * tar: Fix GNU tar help output parsing regex, fixes #15
  * tar: Don't write to /tmp/jetel
  * python: Simplify code
  * python: Complete all files also after -m
  * python: Don't offer options after -c
  * python: Complete all files only if -c is before current word
  * unzip, zipinfo: Complete on *.pyz
  * _lvm: using a single-pattern case and invoking function according
    to words[1]
  * lvm: _lvm_count_args parameter must be quoted in order to failglob
    not to complain
  * gendiff: Quoting suffix pattern to avoid triggering failglob
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (Alioth:
    [#314709])
  * Refactor bts and uscan, since they use common functions
  * uscan: New completion, thanks to Federico Ceratto
  * bts: New completion, thanks to Federico Ceratto.
  * nmcli completion was integrated upstream
  * ssh-add, ssh-keygen: -? needs to be quoted under failglob (take 2)
    (Alioth: #314709)
  * umount: Fix mount points escaping/unescaping with Bash-4.3
  * slapt-src: Handle --config=FILE option properly
  * sbopkg, slapt-{get,src}: expand tilde in config file name
  * slapt-{get,src}: Fix issue with sed not being able to handle some
    characters
  * slapt-src: split options from their arguments
  * psql: Tell psql to not load .psqlrc as it may change output format
    (Alioth: #314636)
  * mplayer: -dvd-devices takes dvd devices, dirs and .iso files as
    argument
  * 7z: Improve completion
  * f77, f95: Use the same completion as for g77, g95 if they are
    links to gfortran
  * make: Use only posix basic regexps with sed (Alioth: #314345)
  * perl: -d/-dt option argument is optional (Alioth: #314242)
  * Add config for cmake to bash-completion.
  * kcov: Add new sort types, complete --replace-src-path arguments
  * feh: Add new sort type
  * man: Use -w instead of --path
  * chronyc: Update help text parsing
  * chronyc: Add missing subcommands
  * chronyc: Add -6 option
  * minicom: Recognize user ~/.minirc.* as config files
  * rpmbuild: Complete *.spec on --clean (RedHat: #1132959)
  * tar: rework the completion completely
  * portsnap: New completion.
  * modprobe: fix params with multi-line descriptions
  * gdb: support --args style completion (Alioth: #314664)
  * make: Fix basic regex for portability (Alioth: #314345)
  * gnokii: New completion
  * xmllint, xmlwf, xsltproc: Complete on Mallard *.page files
  * pypy: New completion identical to python (Alioth: #314501)
  * make: Don't pick up variables when makefile is reloaded
  * make: Offer hidden targets when it is clear that the user is
    trying to complete one of them
  * make: Fix detection of intermediate targets where make has changed
    its database whitespace
  * make: completion shouldn't be confused by the output of $(info
    confuse: make)
  * zopflipng: New completion
  * ssh: Extract duplicate code to _ssh_configfile
  * gnokii, minicom: Use grep through "command"
  * Update URLs and various instructions to GitHub
  * ssh: Avoid completing commands before hostname
  * chronyc: Parse command args from help output
  * chronyc: Wrap long lines
  * Load completions also from $XDG_DATA_DIRS (RedHat: #1264094)
  * (testsuite) Ignore files generated by complete-ant-cmd.pl
  * scp, sftp: Complete -S on commands
  * scp, sftp: Fix querying ssh options
  * sftp: Add -l arg non-completion
  * ssh-copy-id: Offer only *.pub to -i
  * mpv: Remove mplayer-aliased completion
  * modplug*: Associate *.oct and *.okt
  * rpm: Add --whatenhances/recommends/suggests/supplements and
  - -recommends/supplements completions
  * pgrep, pidof, pkill, pwdx, vmstat: Add support for procps-ng
  * pdftotext: New completion
  * checksec: New completion
  * ssh: Complete HostbasedKeyTypes,HostKeyAlgorithms,KexAlgorithms
    values
  * ssh: Query ciphers and macs from ssh before hardcoded fallback
  * ssh: Add -Q argument completion
  * sysctl: Return early on --help, --version
  * sysctl: Try parsing options from help before usage
  * eog: Complete on *.ppm (RedHat: #1090481)
  * tar: Plug $line var leak
  * tar: Style tweaks
  * bsdtar, tar: Remove symlinks from git, have make create them
  * jshint: New completion
  * gnokii: Include and install it
  * gnokii: Fix completions of options that are prefixes for others
  * gnokii: Drop dead code
  * (testsuite): Add basic gnokii test case
  * gnokii: Various minor and cosmetic fixes
  * Load user completions from $BASH_COMPLETION_USER_DIR/completions
  * synclient: New completion
  * tune2fs: Add missing return in -M arg completion
  * reptyr: Rename file to _reptyr to avoid conflict with upstreamed
    completion
  * dropuser: New completion
  * createuser: New completion
  * createdb, dropdb: Drop -o default, it does not appear to do
    anything good here
  * tshark: Simplify cut usage
  * mcrypt: Simplify -m arg completion
  * strings: Fix -T/--target arg completion with non-English locale
  * chrome, firefox etc: Complete on *.pdf
  * ccache: Add -o/--set-config arg name completion
  * gphoto2: Replace tail with awk
  * gphoto2: Fix split argument handing, and colon treatment in --port
    args
  * Actually install the lz4 completion
  * _pnames: Add -s for producing (possibly) truncated names (RedHat:
    [#744406])
  * (testsuite) Add cd in dir without subdirs or CDPATH test case
  * Protect various compgen invocations from -* leakage (Debian:
    [#766163])
  * pigz, unpigz: Handle *.zz
  * rpmbuild: Complete *.spec on --nobuild
  * mplayer, *xine: Complete on *.mts (Debian: #759219)
  * ant: Support buildfile set in $ANT_ARGS (Alioth: #314735)
  * ant: Don't offer more completions after options that exit
  * 7z, adb: Trivial cleanups
  * python(3): Add -X argument non-completion
  * xsltproc. TODO fix for previous commit
  * xmllint, xmlwf, xsltproc: Complete on *.dbk and *.docbook (Alioth:
    [#314770])
  * xz: Complete -T/--threads argument
  * adb: New completion
  * modprobe: Try parsing help before using hardcoding option list
  * mpv: New completion alias + adjustments for mplayer (Debian:
    [#749115])
  * hostname: New completion
  * nslookup: complete on hosts (Alioth: #314673)
  * eog: Complete on *.pgm (RedHat: #1090481)
  * pngfix: New completion
  * qemu: Fix -balloon arg completion
  * qemu: Apply completion to qemu-kvm/-system-i386/-system-x86_64 too
  * xrandr: Use the invoked command internally, not hardcoded "xrandr"
  * xrandr: Add (some) --setprovider* arg completion support
  * ri: Fix class completion with ri &gt;= 3.
  * ri: Fix colon handling in class completion.
  * flake8: New completion
  * pyflakes: New completion
  * cal,chfn,chsh,dmesg,eject,hexdump,look,newgrp,renice,runuser,su,wr
    ite: Deprecate on Linux in favor of util-linux ones (Debian:
    [#737672])
  * hwclock,ionice,rtcwake: Deprecate in favor of util-linux ones
    (Debian: #737672)
  * ssh-keygen: New completion
  * jpegoptim: New completion
  * ip: Add some addr, addrlabel, and route arg completions
  * aptitude, dpkg: Replace some grep+cuts with awk
  * gcc, lintian, make, pkgadd, slackpkg: grep -&gt; "command grep"
    (Debian: #734095)
  * lintian: Replace some grep+cuts with awk
  * lz4: New completion.
  * optipng: New completion.
  * cppcheck: Include - in --file-list completions.
  * wtf: Look for acronym db from /usr/share/games/bsdgames/acronyms
    too.
  * wtf: Don't offer -f if it was already specified.
  * wtf: Hush stderr when db file doesn't exist.
  * appdata-validate: New completion.
  * timeout: New completion.
  * abook, kldunload: Pre-expand \t instead of relying on sed
    supporting it.
  * dict: Trivial regex cleanup.
  * zopfli: New completion.
  * bzip2, gzip, lzma: Cleanups.
  * 2to3: New completion.
  * file-roller: Reuse unzip's xspec.
  * 7z: New completion.
  * hcitool, rfcomm, ciptool, hciconfig: Don't leak $args.
  * perl: Fix -dt: completion.
  * perl*: Fix handling of relative paths in @INC.
  * wget: Add --accept-regex/--reject-regex/--regex-type arg
    (non)completions.
  * wget: Drop incorrect -nv arg completion.
  * wget: Stop completing after --help/--version.
  * Clean up/compact various globs.
  * cvs: Fix checkout -j non-completion.
  * sh: Complete script arguments with all filenames (Alioth:
    [#314226]).
  * nmcli: Deprecate our completion, upstream has one in 0.9.8.0.
  * cvs rm: Don't filter existing files with -f (RedHat: #949479).
- Drop patches now upstream
  init-completion-boo922758.patch
  pushd-completion-bnc818365.patch
- Rename patches
  bash-completion-2.1.patch becomes bash-completion-2.4.patch
- Port the patches to newer version 2.4
  FOO-dir-completion-boo905348.patch
  LVM-completion-bsc946875.patch
  PS1-completion-boo903362.patch
  backtick-completion-boo940835.patch
  backticks-bsc963140.patch
  ls-completion-boo889319.patch
  respect-variables-boo940837.patch
  rm-completion-smart-boo958462.patch
  sh-script-completion-boo977336.patch
- Only remove completion for umount/mount for older SUSE versions (boo#995045)</changelog>
  <changelog author="werner@suse.de" date="1481716801">- Add patch tar-completion.patch to allow mixed options with long
  and short options (boo#1012212)</changelog>
  <changelog author="werner@suse.de" date="1481803200">- Fix cut&amp;paste error in final ls completion</changelog>
  <changelog author="werner@suse.de" date="1481803201">- Detect if the completions for mount/umount have to be removed
  for modern util-linux package but without using suse_version</changelog>
  <changelog author="nico.kruber@gmail.com" date="1496145600">- Update to version 2.5
  * Support for python gui source files (#91)
  * mr: New completion
  * ssh-keygen: support ed25519 keys (#79)
  * Add sidedoor to _ssh() completion (#106)
  * .ipa is just a zip file and we should let unzip handle it (#71)
  * ant: parse targets in imported buildfiles (#84)
  * Add more tests for ccache
  * ccache: fix completing compiler's flags
  * test suite: Add java/javac non-completion fixture
  * javac: Complete -cp like -classpath
  * travis: Skip bluez and nis for now due to post-install script
    issues
  * test/config/*: Delete trailing whitespace
  * (test suite): Avoid loading user's ~/.bash_completion, fixes #87
  * ip: Recognize a as alias for address and l for link
  * ip: Recognize address in addition to addr
  * mr: Disable "clean" test case, command N/A before mr 1.20141023
  * ssh-keygen: Parse switches with _parse_usage, not _parse_help
  * mplayer: Associate with *.mjpg, *.mjpeg (Debian: #837779)
  * dd: Sync completions with coreutils 8.24
  * travis: Add mr
  * perl: Remove full path to cat in PERLDOC_PAGER call
  * deja-dup: New completion
  * CONTRIBUTING: Reorder sections
  * *: Move indentation settings to .editorconfig
  * make: Declare _make_target_extract_script like other functions
  * Travis: zopfli is AWOL?
  * *: Whitespace fixes
  * Minor edits to README.md (mostly formatting) (#110)
  * Fix bug in 'make' completion when using BSD sed (#108)
  * Add support for Include in ssh config (#70) (#80)
- adapt LVM-completion-bsc946875.patch</changelog>
  <changelog author="werner@suse.de" date="1499169600">- Update to version 2.7
  * Makefile: update default compatdir (#132)
  * Make user completion file configurable, disable in tests
  * test suite: Generalize xspec completion install check
  * pyflakes: Remove redundant xspec completion
  * test suite: Fix __expand_tilde_by_ref test expectation output
  * pdfunite: New *.pdf completion
  + bash-completion (2.6)
  * Add missing sidedoor to .gitignore (#114)
  * test suite: Mark expected centos6 CI _filedir failures as such
  * Expose version in BASH_COMPLETION_VERSINFO, use it in profile.d
    script
  * test suite: Skip an expected make test case failure in centos6 CI
  * test suite: Fix ifdown and ifup CI test skipping
  * test suite: Ignore env var pulled in by use of scp in tests
  * test suite: If colon trim doesn't do anything, trim as usual
  * tar: Comment spelling fixes
  * test suite: Mark dpkg -L test case untested if no packages
    installed
  * test suite: Cosmetic tweaks
  * dpkg: Fix dpkg -i home dir completion
  * test suite: Improve ls home dir test descriptions
  * python: Split module completion to separate helper
  * micropython: New completion, aliased from python
  * test suite: Add Python module completion test case
  * python: Fix traceback avoidance on module completion error
  * openssl: Parse available digests from dgst -h
  * openssl: Add sha2 commands
  * gm: New completion, commands only for now
  * (test suite): Test screen -T completions
  * (test suite): Set TERM to dumb, not dummy
  * Revert "(test suite): Fix alias and cd cursor position tests"
  * mplayer: Remove duplicate *.m4a and *.m4v associations
  * mplayer, xine, etc: Associate *.mp4a and *.mp4v
  * xine etc: Fix *.m4a association
  * bind: Add option and argument (non-)completions
  * _user_at_host: Set nospace only when completing username part
  * _user_at_host: Append @ suffix to username part completions
  * man: Don't check OSTYPE or GNU userland, just enable on all
    systems
  * (test suite): Set dcop result to untested if dcop server is not
    running
  * (test suite): Don't insist on loading all completions dynamically
  * _configured_interfaces: Parse from /etc/network/interfaces.d/* on
    Debian
  * py.test: New completion
  * oowriter: Associate with *.pdf
  * Don't define BASH_COMPLETION_COMPAT_DIR
  * ri: Add option and arg completions
  * (test suite): Add our own dummy ri test fixture
  * (test suite): Info test needs docs, don't exclude from CentOS
  * (test suite): Fix CentOS 6 tcllib setup
  * (test suite): Simplify renice test, fix with only one completion
  * (test suite): Don't assume configured interfaces in CI setups
  * Don't offer * as configured interface when there are none
  * (test suite): Add basic CentOS 6 container for bash 4.1 coverage
  * (test suite): Ignore runtime loaded env function changes
  * (test suite): Add mailman bin dir to PATH for arch test
  * arch: Parse options from --help
  * (test suite): Load tested completions dynamically
  * (test suite): Accept non-whitespace single word in
    assert_complete_any
  * (test suite): Avoid interference from user and system dirs (#87)
  * (test suite): Install some things N/A in ubuntu14 to fedoradev
  * (test suite): Add unrar to ubuntu14 container
  * (test suite): Fix alias and cd cursor position tests
  * (test suite): Add basic alpine test case
  * alpine: Parse opts from -h output, add some opt arg completions
  * (test suite): Install jshint globally in ubuntu14
  * (test suite): Add mailman bin dir to PATH for some mailman tools
  * (test suite): Install jshint to ubuntu14 container with npm
  * unshunt: Parse options from --help
  * (test suite): Test lsof on ubuntu14
  * (test suite): Add basic hping3 test case
  * (test suite): Add our ./configure to PATH to test it, test opts
  * (test suite): Add bunch of packages to ubuntu14 container
  * (test suite): Ensure /usr/(local/)games is in $PATH
  * (test suite): Fix perl -d* test cases with no Devel::* installed
  * (test suite): curl has lots of options, add more test prefix
  * (test suite): Fix tar test case for ones having --owner-map
  * (test suite): Unsupport various kill, renice cases if ps is N/A
  * (test suite): Make chkconfig test behave better in container
  * (test suite): Don't assume mounted filesystems in quota* tests
  * newlist: Parse options from --help, add some arg non-completions
  * (test suite): Delete trailing whitespace
  * (test suite): Don't assume lists set up in newlist test cases
  * (docker): Pull in missing fedoradev xvfb-run which dependency
  * mr: Avoid stderr trash and test suite failure if man is N/A
  * (test suite): Fix mmsitepass completion test
  * tshark -G: Avoid stderr noise when running as superuser
  * (docker): Run completion tests with xvfb-run, e.g. for gkrellm
  * ssh-keygen: Make option parsing work with OpenSSH &lt; 7
  * synclient, udevadm: Avoid use of posix char classes for awk
  * test suite: Add WIP Fedora dev config
  * Travis: Switch tests to docker, update to Ubuntu 14
  * xv: Associate with *.j2c, *.j2k, *.jp2, *.jpf, and *.jpg2 (Debian:
    [#859774])
  * eog: Associate with *.j2c and *.jpg2
  * Bump copyright years
  * xine etc: Associate uppercase *.WM[AV]
  * mplayer: Associate *.weba (#112)
  * xine etc: Associate *.webm and *.weba (#112)
- Modify patches
  * FOO-dir-completion-boo905348.patch
  * PS1-completion-boo903362.patch
  * backtick-completion-boo940835.patch
  * backticks-bsc963140.patch
  * bash-completion-2.4.patch
  * bash-completion.changes
  * bash-completion.spec
  * ls-completion-boo889319.patch
  * respect-variables-boo940837.patch
  * rm-completion-smart-boo958462.patch
  * sh-script-completion-boo977336.patch</changelog>
</package>
<package pkgid="4c73cb1560bb5ca3b3adf23b426dda6ad678b18bb1b895ea43a510afb61c6d15" name="bcel" arch="noarch">
  <version epoch="0" ver="5.2" rel="150200.11.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1378209600">- use pristine tarballs
- fix source url
- add gpg verification
- format spec file</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-nodeps.</changelog>
  <changelog author="tchvatal@suse.com" date="1427284800">- Drop gpg-offline
- Drop conditional for manual that is never triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Buildignore more java implementations</changelog>
  <changelog author="fstrba@suse.com" date="1506513600">- Allow building with any java-devel provider
- Specify java source and target level 1.6 to fix build with jdk9
- Added patch:
  * bcel-5.2-encoding.patch
    + specify the correct encoding of the files</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1542283200">- Add maven pom file and generate mvn(...) dependencies for this
  package</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Build against the generic xml-apis provider which allows
  building against bootstrap and non-bootstrap packages according
  of their availability.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- BuildIgnore xalan-j2, xml-apis, xml-resolver, xerces-j2, since
  those packages are not necessary for the build.</changelog>
  <changelog author="pmonreal@suse.com" date="1668081600">- Security fix: [bsc#1205125, CVE-2022-42920]
  * Apache Commons BCEL prior to 6.6.0 allows producing
    arbitrary bytecode via out-of-bounds writing
  * Add bcel-CVE-2022-42920.patch</changelog>
</package>
<package pkgid="d0f40fdf796309e8766516a73c6d4e21dbe1bf79af4ad967171da94277fa11e3" name="bcel" arch="src">
  <version epoch="0" ver="5.2" rel="150200.11.3.1"/>
  <changelog author="skh@suse.de" date="1159185600">- don't use icecream
- use source="1.4" and target="1.4" for build with java 1.5</changelog>
  <changelog author="coolo@suse.de" date="1216728000">- build with gcj to avoid build cycle</changelog>
  <changelog author="coolo@suse.de" date="1217160000">- avoid xerces and xml-commons (ant still works)</changelog>
  <changelog author="mvyskocil@suse.cz" date="1242907200">- update to 5.2
- fixed build under gcj44
- removed javadoc scripplets</changelog>
  <changelog author="mvyskocil@suse.cz" date="1243857600">- fixed archive name (gz -&gt; bz2) in Source</changelog>
  <changelog author="mvyskocil@suse.cz" date="1289217600">- build ignore xml-commons-jaxp-1.3-apis</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337083200">- ignore openjdk from build</changelog>
  <changelog author="mvyskocil@suse.com" date="1357560000">- remove xerces-j2-bootstrap dependency (bnc#789163)</changelog>
  <changelog author="mvyskocil@suse.com" date="1377172800">- disable javadoc generation</changelog>
  <changelog author="mvyskocil@suse.com" date="1378209600">- use pristine tarballs
- fix source url
- add gpg verification
- format spec file</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Do not depend on ant-nodeps.</changelog>
  <changelog author="tchvatal@suse.com" date="1427284800">- Drop gpg-offline
- Drop conditional for manual that is never triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Buildignore more java implementations</changelog>
  <changelog author="fstrba@suse.com" date="1506513600">- Allow building with any java-devel provider
- Specify java source and target level 1.6 to fix build with jdk9
- Added patch:
  * bcel-5.2-encoding.patch
    + specify the correct encoding of the files</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="fstrba@suse.com" date="1542283200">- Add maven pom file and generate mvn(...) dependencies for this
  package</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Build against the generic xml-apis provider which allows
  building against bootstrap and non-bootstrap packages according
  of their availability.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- BuildIgnore xalan-j2, xml-apis, xml-resolver, xerces-j2, since
  those packages are not necessary for the build.</changelog>
  <changelog author="pmonreal@suse.com" date="1668081600">- Security fix: [bsc#1205125, CVE-2022-42920]
  * Apache Commons BCEL prior to 6.6.0 allows producing
    arbitrary bytecode via out-of-bounds writing
  * Add bcel-CVE-2022-42920.patch</changelog>
</package>
<package pkgid="8ba262a24ede0c1ab012f89c66694d7e73ef9539714221055977825c9dae13a4" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="bbbee6064e7ff44045d62d576130b28340121acb7cb77379a5d327f85b86ffcc" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="e5ff5567b4376dd7a5324abda86f5daec05b7224cebd6b5f5616104dfbdd2fc1" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="7e81a007a6afdeff81086d5b8e3c7ac5fcff45a3c01b7c55ee6841b3d1af4927" name="bind" arch="src">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="099169f1112439ba7cbae5048ed57e434c5c466a3458da3cae871fafddd03145" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="14c062cb5c5c79f4ccf2f1a6eb28a5bbb3c025bf3137a8af20e58f47cf02d9a7" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="b49d8ad88b18610656f6b30eab2a9418511e9eceea04e5e370cf73ff20887571" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="07b2e492f7397a7c8386a50dd0a4287813be16712587e1086d74f551ca68927e" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="4854f6f38a936081d2fbbd5e0c3fc9435e6ac7cc26ff6c029256be7597ef0ef9" name="bind" arch="src">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="0b63a3acdf212a767de33a2b530d1bfac680b463bed79a1b5790ef0fe2d3fae5" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="730fc0acf8f51afdcc8c587966c84a630d23d51ee16e73a91a692434e8765723" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="f8bdf36455485453aedc15b5396655b9e27c4fc750482d38e2788be1efd779bf" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="ee8517f4df7cca2e02d47a70da4b8f3b5b9b67ae3a49597d7e6b7b3433ec979d" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="ef6582439a6b54fce2ce2667ea95770815ec6a037f02557eb3e9d85ada884aba" name="bind" arch="src">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="fdea7f0fa19406fac9268bad8f55bbecdf3c8eb0aaa5d8407a71a61402f5f85b" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="51e73c2156af8afd19a89794e2b7f7da6980a213ddf808d2b70c3c321604b9c4" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="150000.12.63.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="josef.moellers@suse.com" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663848000">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="1d9dd73e327ae6e0cabefaf5cd6debc7b003d19ac7ab71037c8dbd0f4c004094" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="ba84cf3a900e214c7b3fb7f098731d145764b8ea791278530137fb97dd570b78" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="232691de2da3d67b6581b9eb260a05ddab8a9b63f090580b674a452a14cc2dcc" name="bind-chrootenv" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="9624626515b7055d7d54112bc9dba6240a14a266a7cfc8d5ec2f17a7940ecca1" name="bind-chrootenv" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="d4aa300a4a9c887854579d6bada9b824ec4df33d0d1120068f9fcf755cb1855e" name="bind-chrootenv" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="3da1a090effb38d730707159dfa85cd5075264a8cdab62341ad43fd209ed2957" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="f4387b9fc6a3c1aa508f24c20ea766c4a1ba0bc07631dbc991b83e7d0206e39d" name="bind-chrootenv" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="93c3c211802dc774ebcd63aa3bebaee1c0d28f64e02a648a9f2b29e4c1701bd5" name="bind-chrootenv" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="fca9cef56ab31d8e6f870d6b008f6bafc8f9d9d550f9bbbf4e6c93bd62463817" name="bind-chrootenv" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="f16d9c43a426e539eb6124f48bb3428af1cd72036db781e9e6ace530eb777f27" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="cec6edd9ad289a7eeba7dd714c64ab62a33d671c37b9244d17dab4c9486ec43c" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150000.12.63.1"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1613390400">- CVE-2020-8625: A vulnerability in BIND's GSSAPI security policy
  negotiation can be targeted by a buffer overflow attack
  [bsc#1182246, CVE-2020-8625, bind-CVE-2020-8625.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1613563200">- dnssec-keygen can no longer generate HMAC keys.
  Use tsig-keygen instead.
  modified genDDNSkey script to reflect this.
  [vendor-files/tools/bind.genDDNSkey, bsc#1180933]</changelog>
  <changelog author="josef.moellers@suse.com" date="1618833600">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1627992000">- Fix off-by-one error when calculating new hashtable size
  When calculating the new hashtable bitsize, there was an off-by-one
  error that would allow the new bitsize to be larger than maximum allowed
  causing assertion failure in the rehash() function.
  [bsc#1188763, 0001-Fix-off-by-one-error-when-calculating-new-hashtable.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663848000">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="7437f51994667d83f84f8154bdd4fd3103f4060fd124f37f4b33d97bacc20fe1" name="bind-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="408cafd3adc06437e75b70485eed41ebbd11dee6de3036ed49bc0a08f2efae4b" name="bind-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="e6908064f53e0a4067338575e6971c18668980a56ca011a1ab8da9df47c66423" name="bind-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="5640e39c8fa483467b01b749a120a0b3f436219db09e3701cb055703a8c1e96f" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.21.2"/>
  <changelog author="josef.moellers@suse.com" date="1592481600">- Upgrade to version bind-9.16.4
  Fixing two security problems:
  * It was possible to trigger an INSIST when determining
    whether a record would fit into a TCP message buffer.
    (CVE-2020-8618)
  * It was possible to trigger an INSIST in
    lib/dns/rbtdb.c:new_reference() with a particular zone
    content and query patterns. (CVE-2020-8619)
  Also the following functional changes:
  * Reject DS records at the zone apex when loading
    master files. Log but otherwise ignore attempts to
    add DS records at the zone apex via UPDATE.
  * The default value of "max-stale-ttl" has been changed
    from 1 week to 12 hours.
  * Zone timers are now exported via statistics channel.
    Thanks to Paul Frieden, Verizon Media.
  Added support for idn2 to spec file (Thanks to Holger Bruenjes
  &lt;holgerbruenjes@gmx.net&gt;).
  More internal changes see the CHANGES file in the source RPM
  This update obsoletes Makefile.in.diff
  [bsc#1172958, CVE-2020-8618, CVE-2020-8619, Makefile.in.diff
  bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
</package>
<package pkgid="ae7ab7976a62fc44364800f7a81112172c055b68a7defe1b6c7e66f2afb1f942" name="bind-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="5318792bcbe66415f5994266e06661703ee34ed713aaf8711616f467dc4f7d38" name="bind-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="55653b1c13c1effcdb2f2d7841178915ef7d466cde933c88163738537a3e555a" name="bind-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="c9be3d9519d5996a3f02487e88ef12284ecf75feeebecdcac35c2fb58820c93d" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="150300.22.24.1"/>
  <changelog author="josef.moellers@suse.com" date="1593518400">- Changed /var/lib/named to owner root:named and perms rwxrwxr-t
  so that named, being a/the only member of the "named" group
  has full r/w access yet cannot change directories owned by root
  in the case of a compromized named.
  [bsc#1173307, bind-chrootenv.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1595332800">- Upgrade to version bind-9.16.5
  * The "primary" and "secondary" keywords, when used
    as parameters for "check-names", were not
    processed correctly and were being ignored.
  * 'rndc dnstap -roll &lt;value&gt;' did not limit the number of
    saved files to &lt;value&gt;.
  * Add 'rndc dnssec -status' command.
  * Addressed a couple of situations where named could crash
  For the full list, see the CHANGES file in the source RPM.</changelog>
  <changelog author="josef.moellers@suse.com" date="1596715200">- Added "/etc/bind.keys" to NAMED_CONF_INCLUDE_FILES in
  /etc/sysconfig/named to suppress warning message re
  missing file.
  [vendor-files.tar.bz2, bsc#1173983]</changelog>
  <changelog author="josef.moellers@suse.com" date="1597752000">- Upgrade to version 9.16.6
  Fixes five vilnerabilities:
  5481.   [security]      "update-policy" rules of type "subdomain" were
    incorrectly treated as "zonesub" rules, which allowed
    keys used in "subdomain" rules to update names outside
    of the specified subdomains. The problem was fixed by
    making sure "subdomain" rules are again processed as
    described in the ARM. (CVE-2020-8624) [GL #2055]
  5480.   [security]      When BIND 9 was compiled with native PKCS#11 support, it
    was possible to trigger an assertion failure in code
    determining the number of bits in the PKCS#11 RSA public
    key with a specially crafted packet. (CVE-2020-8623)
    [GL #2037]
  5479.   [security]      named could crash in certain query resolution scenarios
    where QNAME minimization and forwarding were both
    enabled. (CVE-2020-8621) [GL #1997]
  5478.   [security]      It was possible to trigger an assertion failure by
    sending a specially crafted large TCP DNS message.
    (CVE-2020-8620) [GL #1996]
  5476.   [security]      It was possible to trigger an assertion failure when
    verifying the response to a TSIG-signed request.
    (CVE-2020-8622) [GL #2028]
  For the less severe bugs fixed, see the CHANGES file.
  [bsc#1175443, CVE-2020-8624, CVE-2020-8623, CVE-2020-8621,
  CVE-2020-8620, CVE-2020-8622]</changelog>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642507200">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- When using forwarders, bogus NS records supplied by, or via, those
  forwarders may be cached and used by named if it needs to recurse
  for any reason, causing it to obtain and pass on potentially
  incorrect answers.
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657108800">- Changed ownership of /var/lib/named/master from named:named to
  root:root.
  [bsc#1201247, bind.conf]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Security Fixes:
  * Previously, there was no limit to the number of database lookups
  performed while processing large delegations, which could be abused
  to severely impact the performance of named running as a recursive
  resolver. This has been fixed.
  [bsc#1203614, CVE-2022-2795, bind-CVE-2022-2795.patch]
  * A memory leak was fixed that could be externally triggered in the
  DNSSEC verification code for the ECDSA algorithm.
  [bsc#1203619, CVE-2022-38177, bind-CVE-2022-38177.patch]
  * Memory leaks were fixed that could be externally triggered in the
  DNSSEC verification code for the EdDSA algorithm.
  [bsc#1203620, CVE-2022-38178, bind-CVE-2022-38178.patch]</changelog>
  <changelog author="scabrero@suse.de" date="1669636800">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
</package>
<package pkgid="ff0cf0432edba5c6c00e58653b98c9e542d55a5b84454116816d91c79a396214" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="8a809fd7de7450de4587bcf0fb0c4f807dcf4f9e717f84d2fca8c0d35cdcd687" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="0870ca9acec6840902b14a0fd9cf98fd955fd5789270bd6aa9a4a32e830bdef3" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="d76f1b494f79ca863e82cb6652c0eefd75af7bdd4be10e2a5045c42064fc0eb1" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="00f89000232d60f85bd53e120a2a22b17abbeb2236ecc22cd3c4adfef347aed1" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="19409ef439cedd0dfbf9f6be0302d4cbee8768119a2f74d9be7781f69c2ddcf1" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="e3052a5c186b6b4f190f58b76765873818c441c666c61d5705cbd56a364dd6ff" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.31" rel="150400.5.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
</package>
<package pkgid="a6812f22d86ab4e30c8ea7b187c6500c27b334bfd2bde1825938ca9de2eca021" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="7dab32860e4a096259c8568d5d8ea0097147fe70b49666fa0749ed30dad4b303" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="3fbae5901b8a8173d51b990e2d0021ea94de0de28f3ea105a820f3bf177bdc96" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="76655d51357b4ed04edbd756f5ee19f1cf69a35831c5712c3f3eedd5963607f1" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.33" rel="150400.5.11.1"/>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
</package>
<package pkgid="1b03b47ed96288158761c7f1b51612216c639f4eb33bd32a83b3a73c8f9850c8" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="489c8002c75ee687365724b661d370f553d5cdbd36968da20c070862c24ea6be" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="8266bd567a4e16caa956718e81e76db9c4cabc4f4a2b491cccfcfe9b80e637c2" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="0d0708316070e3ddc50cd520d3f19a30f288c6751deed90ba39af4285913a295" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.35" rel="150400.5.14.1"/>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
  <changelog author="josef.moellers@suse.com" date="1626868800">- Since BIND 9.9, it has been easier to use tsig-keygen and
  ddns-confgen to generare TSIG keys. In 9.13, TSIG support was
  removed from dnssec-keygen, so now it is just for DNSKEY (and KEY
  for obscure cases). tsig-keygen is now used to generate DDNS keys.
  [bsc#1187921, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634644800">- Upgrade of bind to 9.16.20.
  This upgrade has the following MAJOR changes:
  * it combines the various libraries into bind-utils as they
    are used only for bind itself.
  * the daemon is started using a systemd unit rather than a
    sysV init script
  * the system is protected against a misbehaving daemon not by
    putting the daemon into a chroot jail but by relying on systemd
    protection.
  * it includes fixes for the following CVEs:
    + Fix off-by-one bug in ISC SPNEGO implementation.
    (CVE-2020-8625)
    + Insufficient IXFR checks could result in named serving a
    zone without an SOA record at the apex, leading to a
    RUNTIME_CHECK assertion failure when the zone was
    subsequently refreshed. This has been fixed by adding an
    owner name check for all SOA records which are included
    in a zone transfer. (CVE-2021-25214)
    + named crashed when a DNAME record placed in the ANSWER
    section during DNAME chasing turned out to be the final
    answer to a client query. (CVE-2021-25215)
    + A specially crafted GSS-TSIG query could cause a buffer
    overflow in the ISC implementation of SPNEGO.  (CVE-2021-25216)
    + An assertion failure occurred when named attempted to send a
    UDP packet that exceeded the MTU size, if Response Rate
    Limiting (RRL) was enabled.  (CVE-2021-25218)
  * it obsoletes the following patches:
    + bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch
    + bind-replace-varrun-with-run.patch
    + bind-CVE-2021-25214.patch
    + bind-CVE-2021-25215.patch
  * it brings with it this new patch:
    + bind-fix-build-with-older-sphinx.patch
  For more changes, see the CHANGES file in the src RPM.
  [jsc#SLE-21678,CVE-2021-25214,CVE-2021-25215,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-replace-varrun-with-run.patch, bind-CVE-2021-25214.patch,
  bind-CVE-2021-25215.patch, bind-fix-build-with-older-sphinx.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1635940800">- Fixed CVE-2021-25219:
  The lame-ttl option controls how long named caches certain types
  of broken responses from authoritative servers (see the security
  advisory for details). This caching mechanism could be abused by
  an attacker to significantly degrade resolver performance. The
  vulnerability has been mitigated by changing the default value of
  lame-ttl to 0 and overriding any explicitly set value with 0,
  effectively disabling this mechanism altogether. ISC's testing has
  determined that doing that has a negligible impact on resolver
  performance while also preventing abuse.
  Administrators may observe more traffic towards servers issuing
  certain types of broken responses than in previous BIND 9 releases.
  [bsc#1192146, CVE-2021-25219, bind-CVE-2021-25219.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642420800">- Added "BuildRequires: python-rpm-macros". This was pulled in by
  python3 by mistake in the past and had been removed via Maintenance
  Update.
  [bind.spec, bsc#1194746]</changelog>
  <changelog author="josef.moellers@suse.com" date="1642593600">- Added /var/log to the ReadWritePaths as some log files are
  written there:
  * dump-file "/var/log/named_dump.db"
  * statistics-file "/var/log/named.stats"
  [bsc#1194721, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- * When using forwarders, bogus NS records supplied by, or via, those
    forwarders may be cached and used by named if it needs to recurse
    for any reason, causing it to obtain and pass on potentially
    incorrect answers. [CVE-2021-25220]
  * TCP connection slots may be consumed for an indefinite time frame
    via a specifically crafted TCP stream sent from a client.
    This issue can only be triggered on BIND servers which have
    keep-response-order enabled, which is not the default configuration.
    The keep-response-order option is an ACL block, and as such, any
    hosts specified within it will be able to trigger this issue on
    affected versions. [CVE-2022-0396]
  [CVE-2021-25220, bsc#1197135, bind-9.16.27-0001-CVE-2021-25220.patch
  CVE-2022-0396, bsc#1197136, bind-9.16.27-0002-CVE-2022-0396.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647518400">- Obsolete bind-chrootenv as it is no longer needed.
  [bsc#1196990, bind.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1652443200">- A non-existent initialization script (eg a leftorver
  "createNamedConfInclude" in /etc/sysconfig/named) may cause named
  not to start. A warning message is printed in named.prep and
  the fact is ignored.
  Also, the return value of a failed script was not handled properly
  causing a failed script to not prevent named to start. This
  is now fixed properly.
  [bsc#1199044, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1655726400">- When enabling query_logging by un-commenting an example in
  bind.conf, named attempts to create a file in /var/log which
  fails due to missing credentials. This also applies to the
  "dump-file" and the "statistics-file".
  This is solved by having systemd-tmpfiles create a subdirectory
  "/var/log/named" owned by named:named and changing the file
  paths accordingly:
  /var/log/named_querylog -&gt; /var/log/named/querylog
  /var/log/named_dump.db -&gt; /var/log/named/dump.db
  /var/log/named.stats -&gt; /var/log/named/stats
  Also, in "named.service", the ReadWritePath was changed to
  include "/var/log/named" rather than just "var/log".
  [bsc#1200685, bind.spec, vendor-files/config/named.conf,
  vendor-files/system/named.service]</changelog>
  <changelog author="josef.moellers@suse.com" date="1657800000">- Update to release 9.16.31
  This is the first of monthly updates of "bind". It is planned
  to update bind when a new upstream maintennace release becomes
  available, which is usually towards the end of a month, see
  https://www.isc.org/blogs/2021-bind-release-model/
  Compared to the previous SUSE release, in this release,
  53 (minor) bugs were fixed
  13 (minor) functional enhancements were made
  3 security issues are now fixed upstream:
    CVE-2022-0396, CVE-2021-25220, CVE-2021-25219
  plus a few minor changes.
  For a full list of changes, please refer to the
  CHANGES file in the source rpm.
  This update obsoletes the following patches:
  * bind-fix-build-with-older-sphinx.patch
  * bind-CVE-2021-25219.patch
  * bind-9.16.27-0001-CVE-2021-25220.patch
  * bind-9.16.27-0002-CVE-2022-0396.patch
  [bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind-9.16.20.tar.xz, bind-9.16.20.tar.xz.sha512.asc,
  bind-fix-build-with-older-sphinx.patch, bind-CVE-2021-25219.patch,
  bind-9.16.27-0001-CVE-2021-25220.patch,
  bind-9.16.27-0002-CVE-2022-0396.patch,
  jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1661256000">- Update to release 9.16.32
  Feature Changes:
  * The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically
  disabled on systems where they are disallowed by the security policy
  (e.g. Red Hat Enterprise Linux 9). Primary zones using those algorithms
  need to be migrated to new algorithms prior to running on these systems,
  as graceful migration to different DNSSEC algorithms is not possible when
  RSASHA1 is disallowed by the operating system.
  * Log messages related to fetch limiting have been improved to provide
  more complete information. Specifically, the final counts of allowed
  and spilled fetches are now logged before the counter object is destroyed.
  Bug Fixes:
  * Non-dynamic zones that inherit dnssec-policy from the view or options
  blocks were not marked as inline-signed and therefore never scheduled
  to be re-signed. This has been fixed.
  * The old max-zone-ttl zone option was meant to be superseded by
  the max-zone-ttl option in dnssec-policy; however, the latter option
  was not fully effective. This has been corrected: zones no longer load
  if they contain TTLs greater than the limit configured in dnssec-policy.
  For zones with both the old max-zone-ttl option and dnssec-policy
  configured, the old option is ignored, and a warning is generated.
  * rndc dumpdb -expired was fixed to include expired RRsets,
  even if stale-cache-enable is set to no and
  the cache-cleaning time window has passed.
  [bind-9.16.32.tar.xz, bind-9.16.32.tar.xz.sha512.asc,
  bind-9.16.31.tar.xz, bind-9.16.31.tar.xz.sha512.asc,
  bind.spec, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724800">- Include a modified createNamedConfInclude script again, as this
  broke compatability with existing configurations.
  A symlink for named.conf.include to /var/lib/named is created to
  allow for a read-only /etc directory.
  However it is still advised to change the existing configuration.
  See README-bind.chrootenv for a guide how to do this.
  [bsc#1203250, vendor-files/tools/createNamedConfInclude,
  vendor-files/docu/README-bind.chrootenv, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1662724801">- Add systemd drop-in directory for named service
  [bsc#1201689, bind.spec]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1663761600">- Update to release 9.16.33
  Security Fixes:
  * Previously, there was no limit to the number of database lookups
    performed while processing large delegations, which could be
    abused to severely impact the performance of named running as a
    recursive resolver. This has been fixed. (CVE-2022-2795)
  * named running as a resolver with the stale-answer-client-timeout
    option set to 0 could crash with an assertion failure, when
    there was a stale CNAME in the cache for the incoming query.
    This has been fixed. (CVE-2022-3080)
  * A memory leak was fixed that could be externally triggered in the
    DNSSEC verification code for the ECDSA algorithm. (CVE-2022-38177)
  * Memory leaks were fixed that could be externally triggered in the
    DNSSEC verification code for the EdDSA algorithm. (CVE-2022-38178)
  Feature Changes:
  * Response Rate Limiting (RRL) code now treats all QNAMEs that are
    subject to wildcard processing within a given zone as the same
    name, to prevent circumventing the limits enforced by RRL.
  * Zones using dnssec-policy now require dynamic DNS or
    inline-signing to be configured explicitly.
  * A backward-compatible approach was implemented for encoding
    internationalized domain names (IDN) in dig and converting the
    domain to IDNA2008 form; if that fails,
    BIND tries an IDNA2003 conversion.
  Bug Fixes:
  * A serve-stale bug was fixed, where BIND would try to return stale
    data from cache for lookups that received duplicate queries or
    queries that would be dropped. This bug resulted in premature
    SERVFAIL responses, and has now been resolved.
  [bsc#1203614, bsc#1203618, bsc#1203619, bsc#1203620, jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1668168000">- Update to release 9.16.34
  New Features:
  * Support for parsing and validating the dohpath service
    parameter in SVCB records was added.
  * named now logs the supported cryptographic algorithms during
    startup and in the output of named -V.
  Bug Fixes:
  * Changing just the TSIG key names for primaries in catalog
    zones? member zones was not effective. This has been fixed.
  Known Issues:
  * Upgrading from BIND 9.16.32 or any older version may require a
    manual configuration change. The following configurations are
    affected:
  - type primary zones configured with dnssec-policy but without
    either allow-update or update-policy,
  - type secondary zones configured with dnssec-policy.
    In these cases please add inline-signing yes; to the individual
    zone configuration(s). Without applying this change, named will
    fail to start. For more details, see
    https://kb.isc.org/docs/dnssec-policy-requires-dynamic-dns-or-inline-signing
  [jsc#SLE-24600]</changelog>
  <changelog author="jorik.cronenberg@suse.com" date="1669291200">- Update to release 9.16.35
  Bug Fixes:
  * A crash was fixed that happened when a dnssec-policy zone that
    used NSEC3 was reconfigured to enable inline-signing.
  * In certain resolution scenarios, quotas could be erroneously
    reached for servers, including any configured forwarders,
    resulting in SERVFAIL answers being sent to clients.
  * rpz-ip rules in response-policy zones could be ineffective in
    some cases if a query had the CD (Checking Disabled) bit set to
    1.
  * Previously, if Internet connectivity issues were experienced
    during the initial startup of named, a BIND resolver with
    dnssec-validation set to auto could enter into a state where it
    would not recover without stopping named, manually deleting the
    managed-keys.bind and managed-keys.bind.jnl files, and starting
    named again.
  * The statistics counter representing the current number of
    clients awaiting recursive resolution results (RecursClients)
    could overflow in certain resolution scenarios.
  * Previously, BIND failed to start on Solaris-based systems with
    hundreds of CPUs.
  * When a DNS resource record?s TTL value was equal to the
    resolver?s configured prefetch ?eligibility? value, the record
    was erroneously not treated as eligible for prefetching.
  [jsc#SLE-24600]</changelog>
</package>
<package pkgid="ad0b7af6a36be7a6a3dcca35d405f8e2ae7a0fdc29f8e07568eed0d218448d4c" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="e46970adfc797e10578cd52040dbb161bf462e1b35ae209b1e7923acaa1a78f9" name="binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="81449f296279aeda3b1652a8fa74ffda46c1a75f9cf81c5e5c2c0d195205e25f" name="binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="73603bcefd4a47c8972df9888f03763253e28a030382c066dfedcfc19dd5b089" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="15f2419e91416b9f6d1447fdd16083bc6cc923c300d6e415c4e8023fdd5ccece" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="abd9497444dfb62c6e20e59c437f785be09e1b7c99f4383649513ee014096584" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="a4cdc0a15045497b31aa824a613294553210d9e21c313fec1b6b37fa9bc50630" name="binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="6848230ee1da9059c36ad62b5ee7561f89e7692764553f419a31058665627782" name="binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="c446b9de8a95c2eaacccd8abfeef3b80cdca26d26c5d15f475c575e9d8e2c0f4" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="e4391bec92c9dd973dc0f821f3a74e4b21437fc68bdc952ca284019851380561" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="6ff76250a0126bd6b4e895f7f9240b519d3bd118f7838a6088e39cfd22181816" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="3269cf2f79d4fe3d403611bb37da7e0b01255b49811a64b73b6e0e352ecd195d" name="binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="4cb8edc1574092d6c7420e9948f3053c31ba4de47384d62fbf7345872571d956" name="binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="dbd20cc50e656f9f0004f34a8fe6f64682e0702430aa04792c79f9c6dfcacd03" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="08a4cedd4ee594844156c58f15521441d3640b51d331bf346828e96903dda0f3" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="751f323284b359c5e0f2ba0cbf46e15b322c39e02607c0978c6911d534bc184d" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="34b25a6d1df9cb31d694e7485c071d8510478503facfd55064d1daf9cdbeda91" name="binutils" arch="ppc64le">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="a64bf2e69e3a1a2e38c4178a705705b14c92c4de9509438ad1af79225540af6f" name="binutils" arch="s390x">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="73c93519fc67544e20a94d93da844622dbd66c94b3a7da491edc8a2893281d7e" name="binutils" arch="src">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="89602b6108520161bcc99555b51c5bbfab36e0579bb7ceeae8859661aae5e364" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="5342b3bf25059871189fa9b56052681757528fac7132f7e3e09c1bd97ef67534" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="c2ea54779042a9f07580ad75f88c380541fc4b399bfae52797853df3ad41d536" name="binutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="1fb1e57eb0440a1bba6795149edb28c6182f34c076e9f5a8f40ecdf0ce0e2a16" name="binutils-devel" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="708bf80260220cf6ea9a32bd63b3b12e8b13eafc2a6a7be1060b9d371fcc7146" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="b0b24470128268cc87684b95a38602a4b0a2db4c6e36c4cf0a53acd20fe07e29" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="bf0ae64945bd6f67b7897daacb8406cd96c0eef189fcfc37b04cdbf6f6ac6048" name="binutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="585b2588c5b7576a2f428c5b8e863b164f6de99294eb2c827f606448c3c85331" name="binutils-devel" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="c2514274113d3642c2b8b3f7b8f00dbc4acc2cc4572a3df64339042570d94e55" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="fd5eb94db8bcca71c4503dce87d446c80727bbc8405e63d94cbbd59038cdb100" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="eb93131a5982a7d6f1328b4dba592a1f2d247bcc080ba588acc32450f88f417e" name="binutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="909bbe4442e34c8d274f7fdee91dea110e7333660b630cf54f680fcd369af5cf" name="binutils-devel" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="f5f936d34b323951afe724e5d05da3cf68e5623a83c8cd46236e4e01b4fc4913" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="cc16931bc217a2a0e33d42274842921d6d801234e19ecff86ed9aba14f06e922" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="6df46ca22fd7625f9f6dbfd4cc954182e07744595b8bd76d3c3b6cbc89fa0d53" name="binutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="dc04c5b5f81a360949eca8e33ca0b57117f4f0ad044cbdfae80d9c023cd3f7ad" name="binutils-devel" arch="s390x">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="43c99dc9c1b7a32bd540fcec28bd81b2376781787517625bc918d6ab2a3879fd" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="f78793f8f08460d72e8ccbf57ff13640c92c33bd18de21ce58a1ea30a67d8e83" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="55893564325ff0337837b2c4d051c2d5c7598ae85760fe6ed13d9c0b471094ab" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="6c76f317e3132e255b9327090cf6e0245207e65e6eaac314f1b5fd9fd779227c" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="988612b7c1b2ea483a32d9f3c4c87dac65ed73cad4cc36ac6858f5e5680fa102" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="cc65873fb9c31e12a490de1ca5582d404bac32927f0308dcf299b398a414d569" name="binutils-gold" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="0094923fa76c7671dbe046ebeb8641bf9cd47e39faddfe0e98406b99b062db8e" name="binutils-gold" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="82ed1aea07bfb868f957924e4f765eb9c7b2956ded396b5b820f7b434133c4e7" name="binutils-gold" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6b9f5710de27c3e8ca34520b726a1bb7dc60cc01161007ac1d38b2e4db32ad83" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="85bdf66f562e3a9bbb5af59cc69e8ed022509f978abf2a9fff1716f26dbdec2b" name="binutils-gold" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="d345aa430f21b11f9c9143ca0c0e7ae9155c82cd504fa0b7975097e48fade175" name="binutils-gold" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="d587b858bd9636eef0eeaeca06a09196faa75085adf0d9e96b66bc00c978c6d8" name="binutils-gold" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="87bde5a2ed24e3f33603422614f98af6174fc52c9e14d3c59b81277dd6cc6cc1" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.34.1"/>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
</package>
<package pkgid="e7f0765aeaeed860b12f1e8d7c483ff454943494a7ff5b5484476f3598b18aa8" name="binutils-gold" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="e47324825bc14b4b46782098b54169e2f9d67a827b43858004db5619d0a99dc6" name="binutils-gold" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="af5a27b3077a9b086b088e7fc23fcff585e69784409ab445193ce1c928cc58cc" name="binutils-gold" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="e57c7d94ecc78cccca1ea8fb0ebe526b51a36634d5d03ca0684528997e7850c2" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]</changelog>
  <changelog author="matz@suse.com" date="1651838400">- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="matz@suse.com" date="1655121600">- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
</package>
<package pkgid="8946e73412fa37842b51cf60d9316de92687b665382998a395d252752e653ee1" name="binutils-gold" arch="aarch64">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="f5fc19bbf4915554d72e5e6ae089b8798a9058a72c93654fc98e6117fc8e3ea5" name="binutils-gold" arch="ppc64le">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="1530c90465a65dc6bf3f2b83446df7131cee27b8962cefdc38f09feeee5c9f8f" name="binutils-gold" arch="s390x">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="2580fdb5bf9d075e26685b47ac3fd654822ffb63624c4440b4bfa8303dec687a" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.39" rel="150100.7.40.1"/>
  <changelog author="meissner@suse.com" date="1647864000">- Add usage of a SUSE_ZNOW environment variable which allows switching
  on "-z now" by default using "export SUSE_ZNOW=1", similar to
  the SUSE_ASNEEDED variable.  Adds binutils-znow.patch.</changelog>
  <changelog author="matz@suse.com" date="1649678400">(Fake entry from SLE for tracking purposes:)
- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1649678401">- Update binutils-2.38-branch.diff.gz (to c210342d7f5) to include
  recognition of 'z16' name for 'arch14' on s390.  [bsc#1198237]</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add binutils-revert-rela.diff to revert back to old behaviour
  of not ignoring the in-section content of to be relocated
  fields on x86-64, even though that's a RELA architecture.
  Compatibility with buggy object files generated by old tools.
  [bsc#1198422]
  (forward port from SLE)</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Start using _multibuild for cross binutils.</changelog>
  <changelog author="mliska@suse.cz" date="1651665600">- Make multibuild utilize only the main binutils.spec file.
- Remove not needed README.First-for.SUSE.packagers, pre_checkin.sh.</changelog>
  <changelog author="mliska@suse.cz" date="1651665601">- Fix ExcludeArch for ppc.</changelog>
  <changelog author="mliska@suse.cz" date="1651665602">- Renumber Sources.</changelog>
  <changelog author="matz@suse.com" date="1651838400">(Fake entry from SLE for tracking purposes:)
- Add binutils-fix-keepdebug.diff for fix bsc#1191908, a problem
  in crash not accepting some of our .ko.debug files.</changelog>
  <changelog author="schwab@suse.de" date="1652097600">- Enable multitarget build on riscv64
- On SLE15 and later, use make -Oline to synchronize configure output by
  lines</changelog>
  <changelog author="mliska@suse.cz" date="1653480000">- Update binutils-2.38-branch.diff.gz (to 93054037f1e304e)
  in order to include PR29087.</changelog>
  <changelog author="mliska@suse.cz" date="1653480001">- Use https for variosu links.</changelog>
  <changelog author="matz@suse.com" date="1655121600">(Fake entry from SLE for tracking purposes:)
- For building shim 15.6~rc1 (and later versions) aarch64 image, objcopy
  needs to support efi-app-aarch64 target. (bsc#1198458)
  Adds binutils-add-efi-aarch64-1.diff,
  binutils-add-efi-aarch64-2.diff, binutils-add-efi-aarch64-3.diff .</changelog>
  <changelog author="mliska@suse.cz" date="1659787200">- Update to binutils 2.39:
  * The ELF linker will now generate a warning message if the stack is made
    executable.  Similarly it will warn if the output binary contains a
    segment with all three of the read, write and execute permission
    bits set.  These warnings are intended to help developers identify
    programs which might be vulnerable to attack via these executable
    memory regions.
    The warnings are enabled by default but can be disabled via a command
    line option.  It is also possible to build a linker with the warnings
    disabled, should that be necessary.
  * The ELF linker now supports a --package-metadata option that allows
    embedding a JSON payload in accordance to the Package Metadata
    specification.
  * In linker scripts it is now possible to use TYPE=&lt;type&gt; in an output
    section description to set the section type value.
  * The objdump program now supports coloured/colored syntax
    highlighting of its disassembler output for some architectures.
    (Currently: AVR, RiscV, s390, x86, x86_64).
  * The nm program now supports a --no-weak/-W option to make it ignore
    weak symbols.
  * The readelf and objdump programs now support a -wE option to prevent
    them from attempting to access debuginfod servers when following
    links.
  * The objcopy program's --weaken, --weaken-symbol, and
  - -weaken-symbols options now works with unique symbols as well.
- Rebase binutils-compat-old-behaviour.diff, binutils-revert-hlasm-insns.diff,
  binutils-revert-plt32-in-branches.diff and remove binutils-2.38-branch.diff.gz.
- For now use --disable-gprofng.
- Includes fixes for these CVEs:
  bnc#1142579 aka CVE-2019-1010204 aka PR23765</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Add binutils-2.39-branch.diff.gz.
- Explicitly enable --enable-warn-execstack=yes and	--enable-warn-rwx-segments=yes.
- Add gprofng subpackage.</changelog>
  <changelog author="mliska@suse.cz" date="1660132800">- Rebase binutils-2.39-branch.diff.gz that contains fix for PR29451.</changelog>
  <changelog author="matz@suse.com" date="1661515200">- Add binutils-pr29482.diff for PR29482, aka CVE-2022-38533
  [bsc#1202816]</changelog>
  <changelog author="matz@suse.com" date="1666008000">- SLE toolchain update of binutils.  Update to 2.39 from 2.37,
  which means obsoleting and hence removing these patches:
  binutils-add-efi-aarch64-1.diff, binutils-add-efi-aarch64-2.diff,
  binutils-add-efi-aarch64-3.diff, binutils-fix-keepdebug.diff,
  binutils-add-z16-name.diff.
  Implements [jsc#SLE-25046, jsc#PED-2029, jsc#PED-2035, jsc#PED-2033,
  jsc#PED-2030, jsc#PED-2038, jsc#PED-2032, jsc#PED-2034, jsc#PED-2031,
  jsc#SLE-25047]
- This fixes these CVEs relative to 2.37:
  [bsc#1188374, bsc#1185597] aka (GCC) PR99935 aka CVE-2021-3648
  [bsc#1193929] aka PR28694 aka CVE-2021-45078
  [bsc#1194783] aka (GCC) PR98886 aka CVE-2021-46195
  [bsc#1197592] aka (GCC) PR105039 aka CVE-2022-27943
  [bsc#1202966] aka PR29289 aka CVE-2022-38126
  [bsc#1202967] aka PR29290 aka CVE-2022-38127
  [bsc#1202969] aka CVE-2021-3826</changelog>
  <changelog author="schwab@suse.de" date="1666699200">- s390-pic-dso.diff: use %pB instead of %B</changelog>
  <changelog author="matz@suse.com" date="1666699201">- Add binutils-maxpagesize.diff for a problem on old code
  streams, where we would generate too large binaries.</changelog>
</package>
<package pkgid="c7e4aca32e11644031477ff2e3180873c053994448f5631d6c91b6d828a00b66" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="d94c3e32bacc54c9bc89f7adfa8a2e7bfcca1fd2e168158a602ac66653877d33" name="bluez" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="56eb1d1a95bb3dc542ed924359eeebbc93a9e1143a313c0e0d8dea723faab7a3" name="bluez" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="d4e4bea0f3a72c3f8e3358132126045cb9adc504f595efae609f13e0a782ce44" name="bluez" arch="src">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="08a24a848995e39fae5f1f8484551d3fc5b7d1a60e4f9a93f6659ecb47879e10" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="a27c85d26af014121489fa8042b34f00e23f737c9b2ebe4b1fd1f601882a03fb" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="4c60df7497fb759c72cf1f1fb892b0c2e2d8278dc74efdafa0c75a5aad488cd0" name="bluez" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="9086d1381e4ffbcf9148da3ed66a4d5f4818d0cbd26c9a4d585391a9569129e5" name="bluez" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="e4426a9946f68615ca60475c2e6a58525fe09ce5e37ad09fbc37ed0e44270429" name="bluez" arch="src">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="137e2dab4a31b359ff38955869e8194aad3e482d3d128fc28de03ef4d1b36734" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="3d7334b8e53308740324c8ba3f65e0ac14d0380c637424898c9f7a337bca15fc" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="fc02dccd077ae98f1f4ca62680747f7d4fb77834e85b3b7dfd4b1cc3839f9ac6" name="bluez" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="0df4a4d60837222e4e1a62781dcb16128caa44553ba8f4353abc9ca586d08265" name="bluez" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="a775abc7925e7d908c4d7fe5470398f3767c15361863bb4515e336e5a89629ad" name="bluez" arch="src">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="384444958ebec9b4fea06a2e699336b6f4f52d2a6c98522a47719eaf03b72d32" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="2acf7db9c6aecd0943fcda7b83276d1d1422a56467b5989a1727f8138b079ab2" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="8d713a9a3c823146cc91fec6ecb0605a8361f41591867983918af504cd00d2d0" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="c8a39c2ec3543cd610b010f7ada561f441075a9bc40ca0bec470daa8a862cf5b" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="76a03b6c85bfb61ee97eb214090d51b6522306ddbda5e935a38c0d2e1b9882b2" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="2eef4eb1ac5c307e2e53663b5b024d7faf23aaf2a02ebe4f0ad418c03d059bce" name="bluez-cups" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="70e3230407a64f4b941d4b4279c2e53b58eb7c03938d5f30d8ea6ad8078979ce" name="bluez-cups" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="7750d6d3c326ec95ba5cd601e4b8b3393160ea2287afac72ec5f433c38b187a4" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="506897f50f5540864ac901aa511c401b47d92a08487aecd053f7263258b28513" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="ed92298179cc62fb34ef2a1594b70985bf851279bda0792a2daa58de3be7ab3b" name="bluez-cups" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="e5b357b409aee175ba15b307114d35047d51d6d11211d626f9acd48a5161663b" name="bluez-cups" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="49c81fe04032036e8d2ab97a415187e7bc3863118b38696261a0be8ca0704e0b" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="8638f4e14ec3c5f43829966fa7290fb1e4bf8d439a8a55ccb27f83a8df8e3a00" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="1c611c5901b153795cfbdbec62d4f911a2ae512e8290f7a2ac05f26c929f7a44" name="bluez-cups" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="312f9d1bd19988692cd6146ce9fa55712a41e9509821841208b97121d82de89f" name="bluez-cups" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="c17032a8d183b184943ffe60b91ea4afef556c8100575daab1969f29d5ec0302" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="30580d7e3776439014373631da7acbb2dbf75d9c2460778e88a71dd38999c35e" name="bluez-deprecated" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="293ba6b45d3251a0bb1890a8c4837930be0079ce0fa83625c1eb39b4b0026175" name="bluez-deprecated" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="4193d24dea1878c0172bb7b55e022629f96d4c1c434ee067c6e7044a7542a5d4" name="bluez-deprecated" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="bbe13281b865be707556314d92d53cfdc7cd21bd3cba55ec027e6bc29c059825" name="bluez-deprecated" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="f1c455c97532caa838066f7c6984b3e0f49da95bebc3f96a2bd2c0333f24a300" name="bluez-deprecated" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="22396ba9a69094b1a952c5c1d260ccf56836acf3d9af13c63598da4482222615" name="bluez-deprecated" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="ae4e45253fb3f7f81386c335f4389357c57e5021ed15bb9de1c90cd15bbf26ac" name="bluez-deprecated" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="5e8da0691d8c26c8542c21cf95e7a856b3116f974a0c29f6febf9fb5864d4b22" name="bluez-deprecated" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="7643fe9b4e42e0b67c29d14106a4870bd3f06a9b84a8e66810c142adaa4e2bc6" name="bluez-deprecated" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="937792a2795cc328c1ade6dea232e31c67431bf016c350dc00ae95ff863da28f" name="bluez-deprecated" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="bc25fc3504b754b0f98ab48f067bc208635a06ff91e0a143ad69ca9b89dc6eab" name="bluez-deprecated" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="3bbbe279449c9a5040b571eef81d8bf73f964ef6cec79804e025467439ac6d3d" name="bluez-deprecated" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="d322b608343a34c00478fce9f58104db4f107fbcc7d00e4d69ac48a12ce02233" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="226ec9ca4ef05d6c595a607d5b9ce5ccae73de411db9564433a0f3beb1506842" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="9ab105ee9ac3823f834360ea4fc1a3c676732061e47ba8c4405f2a67bde5f73d" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="7a385ba539ce51dd30f53a651c02103a5719f3381d61b4b7261c44839b6187b1" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="ba9ea490c95448098beed76d824b433d7aa4d675da6f3449706766410a82741f" name="bluez-devel" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="249f31a1a674c1351355a48fd2d7cebec4ca9c131d1f1915e9a7b6818d0b86e2" name="bluez-devel" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="ff3e287940651075deffae145ecf91c54470bcf23fe441cdf6245fba58171faf" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="fed1eb7d0326f224ed54d18f14102b7c96eb689f4a243b5b00a1698715124acc" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="2cfb81d442400d78b02ef7d33a360bdadfa255725b8f7c7dc518b9d24f87bd18" name="bluez-devel" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="9ee04ac95ecff583ae6ee8df143f7e6944b630227798c1d07cec631ae4c8c86a" name="bluez-devel" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="2cd4db13c4a723ea8bcb60fb2da709e1d49e88d823391d32efa7b7738a926e4c" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="e8ecbe0c008ac0f4e208e407b539027e6b1b05571f44afd37cdf9f7497cd2873" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="49ecb19851a8a8639b175fd257fdd5823648e0a66f49c0a01fb897a630c412a2" name="bluez-devel" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="14c9dbb9654e3813b0351df50e8a8e9776e3c7e97c6c4b44f2d80125fbe766d6" name="bluez-devel" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="670f17295abb25e689b5e00e324209ae0b71b1871ec778efa17a7802a24fa9d9" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="9c8dbcd7b6054e36954b8fb2548d646949709c96f178b679ae301cd1bcf9e8b9" name="bluez-test" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="2327c0cbb384478d89c36f49a6ec806fd716c838a01a13e5ecc7896d19aad608" name="bluez-test" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="24382b53028a2791f36d88fa3ddc1def3a6536322df93cbd2e2f7a2f771fd922" name="bluez-test" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="68e2f1bb561cc7d3a5945a8938aa0b68264508d93594f5e7306b6c535a9c51a8" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.2.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
</package>
<package pkgid="e6a81c2e349a68a3060ebf51914b307706086255ec629ec85959b5bf1f5b4db2" name="bluez-test" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="a5c07ceb55429d34f4864e88897ca0b16c8aaca4b989dc2c09e4486d7d5e5ef4" name="bluez-test" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="435c322563c20e2a233a1f242c7b2be95dc00292ab5375977d6e0f41a4d34513" name="bluez-test" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="f37b57a3e17504884a57e8c91780683d60a8f8807ec9d384bfb107627bbaa003" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.5.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
</package>
<package pkgid="7b487d45f5e5a4213ad4b74f387e2875e93ae1e8b3711474cc708febc09b2c04" name="bluez-test" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="3ab0139bdc26dba21cfcc13b8e59964396e57972b1a611bbd5f0a145f7396fe5" name="bluez-test" arch="ppc64le">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="2b9b185c1d8c4ce05b0c71501bd943be2a80d7954c23aae9217fcbeab4e203fc" name="bluez-test" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="3428a5d4df80654a40ce2af3995cbb1a188ee53932251ff0b90e627229b149fb" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.8.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
</package>
<package pkgid="55a8e1ed643698395429eec11409cf6cdb5834fb4311867f2c3137ade53aae5c" name="booth" arch="aarch64">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="042a312cc4f3fa465445a489cb5496a4340cf6caf102945886c51d6c344d41e6" name="booth" arch="ppc64le">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="43a55587f48a429a87ad921d6837c0e414c0d402f00ea42b28b4e0acadbc6d33" name="booth" arch="s390x">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="bf50cab8aa0b22fff608ebadfa638527b24f7012e3acd564ba8676ba687fd816" name="booth" arch="src">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="6421e42e54eb4c85053e3e29a3f4d506e4e63016ace9573986e8eb0bfeea1b97" name="booth" arch="x86_64">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="6e284f2886546dc4b1d40cb3ba3451cbf0a7b6b211f534d21b1ba956af4a410d" name="booth-test" arch="aarch64">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="e27ea993573f02cfcacbc48ec927f5fdbb71c88c523c1b01611d3445e39a9fce" name="booth-test" arch="ppc64le">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="6d59015f4ea8b1fcfb5dd995a2c1b7a4b5d42149e415a70b7ec2875e4d9ae413" name="booth-test" arch="s390x">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="523b1e544d3fe75a35e059058267ac691ba3d61a594d0fe6cc2f56835e104e51" name="booth-test" arch="x86_64">
  <version epoch="0" ver="1.0+20210519.bfb2f92" rel="150400.3.3.1"/>
  <changelog author="dmuhamedagic@suse.com" date="1449144000">- Update to version v0.2.0_130_g9c5c19f:
  + test: use SSH_OPTS for rsync too
  + test: fix external/booth ip use</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1452600000">- Update to release candidate v1.0 rc1
  + main: prevent segfault on no arguments
  + ticket: term 0 is a valid term (bsc#952426)</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1458129600">- Update to release v1.0
  + systemd: add booth-arbitrator.service (bsc#967036)
  + main: improve address matching procedure</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1458734400">- Update to version v1.0_6_g106efdf:
  + Feature: extprog: add capability to run a set of programs
  + Medium: extprog: external tests timeout after renewal interval</changelog>
  <changelog author="dmuhamedagic@suse.com" date="1460116800">- Update to version v1.0_14_g4d35ac7:
  + main: fix address matching procedure (bsc#994999)</changelog>
  <changelog author="tchvatal@suse.com" date="1467288000">- Reduce conditionals to only keep the default values
- Run systemd macros in proper phases
- Convert to pkgconfig dependencies</changelog>
  <changelog author="ygao@suse.com" date="1468411200">- spec: Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865)</changelog>
  <changelog author="ygao@suse.com" date="1487160000">- spec: fix booth-test containing undesired build sources
- make log contain source address of unknown site
- main: initialize Libcrypt properly before the first use (bsc#1025463)
- extprog: fix race condition on ticket loss (bsc#1025463)
- attr: fix wrong order for hash free functions (bsc#1025463)
- attr: set time string to "" when time is not set
- extprog: fix pid test
- ticket: reset next state on ticket reset
- alternative logger (in service-runnable script)
- allow skipping "coredump nursing" phase
- alternative "nametag" provider: libsystemd
- alternative range2random provider: glib
- alternative logging provider: libqb
- offer alternatives to libraries from (cluster-)glue
- setup_tcp_listener: close socket when no longer needed
- read_client: sizeof(*struct_ptr) instead of sizeof(struct_ptr) (bsc#1025463)
- get_local_id: denoopize dependent condition (signedness issue) (bsc#1025463)
- list_ticket: fix a memleak in case of buffer too small (bsc#1025463)
- do_status: close lock file when no longer needed
- format_peers: fix a memleak in case of buffer too small (bsc#1025463)
- read_config: close config file when no longer needed
- make foreach_* macros use variable refs passed as arguments (bsc#1025463)
- prevent possible truncation w/ invalid geoattrs in CIB (bsc#1025463)
- build: add proper zlib build-time check + link flag + spec's BR
- build: allow requesting no HTML man + use in spec
- fixup: sanitize true-false logic for "daemonize"
- Upstream version cs: b270a78130f40e648844671b3652919d86e1aef4</changelog>
  <changelog author="ckowalczyk@suse.com" date="1496404800">- Build: create and set working directory (bsc#1039727)
  * bug-1039727_booth-build.patch
- Configuration: handle hostnames in booth.conf file (bsc#1037422)
- Upstream version cs: bbddf969550969784b76b743baecdcf72796bdf7</changelog>
  <changelog author="ckowalczyk@suse.com" date="1498132800">- Clinet commands: fixed local IP addresses for booth grant, list, and peers
  commands (bsc#1045067)
  * bug-1045067_booth-fix-booth-grant-cmd.patch
- Patch bug-1039727_booth-build.patch merged to upstream:
  * Build: create and set working directory (bsc#1039727)
- Upstream version cs: 766d61881b2cb576645821322edda0edea04828d</changelog>
  <changelog author="ckowalczyk@suse.com" date="1512129600">- Tickets: added manual tickets, which allow handling 2-site setup
  (fate#322100)
- Debug mode: fixed the interaction with resource agents (bsc#1046790)
- Patch file bug-1045067_booth-fix-booth-grant-cmd.patch has been removed
  after the code being merged to upstream:
  * Clinet commands: fixed local IP addresses for booth grant, list,
    and peers commands (bsc#1045067)
- Upstream version cs: d4cb8cbdaf87e46f636c3d06730b902b79bdcb9c</changelog>
  <changelog author="ckowalczyk@suse.com" date="1519300800">- Build: replace SuSEFirewall2 by firewalld (fate#320794) in booth.spec
- Upstream version cs: 80199f9477fb4fbf8809f31986139efe3f4ef790</changelog>
  <changelog author="ckowalczyk@suse.com" date="1525089600">- Doc: fix the documentation build with asciidoctor (bsc#1075764):
  * fix_asciidoc_build.patch
- Service: restart arbitrator on failure
- Upstream version cs: c2389e3020e8a3780b679cf0c9857bd608e99fa1</changelog>
  <changelog author="aburlakov@suse.com" date="1547726400">- Update to version 1.0+20190112.497c0b9:
  * fix_asciidoc_build.patch is removed, because the tarball already contains the changes.
  * Low: handler: fix spurious warning on alleged "fall-through" in switch (bsc#1123312)
  * Low: main: fix hypothetical file path double traversal discrepancy (bsc#1123310)
  * Med: attr: fix derefence of unspecified value pointer (bsc#1123308)
  * maint: ocf + script: eliminate some false positives with ShellCheck (bsc#1123303)
  * test: unit-test.py: daemon will not stay in foreground with -D anymore (bsc#1123302)
  * test: avoid dangerous mutable/sticky default value (bsc#1123301)
  * test: drop/comment out superfluous imports (bsc#1123300)
  * test: drop underqualified identifier in unittest's 2.6 compat "polyfill" (bsc#1123299)
  * test: remove superfluous shebangs for import-only modules (bsc#1123297)
  * maint: fix typos introduced in 4bb484a (bsc#1123296)
  * maint: fix thinko in .gitignore introduced in 5a457ee (bsc#1123294)
  * Fix malformed man title (bsc#1123290)
  * Handle multi-leader situation for manual tickets. Added manual tickets to Life Tests framework (bsc#1123289)
  * Feature: add manual mode to booth tickets (bsc#1123287)
  * Fix GCC-7 warning on buffer size (bsc#1123285)</changelog>
  <changelog author="aburlakov@suse.com" date="1548676800">- test: fix read -a &lt;&lt;&lt; issue (bsc#1123313)
  * test-fix-read-a-issue.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1597838400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="aburlakov@suse.com" date="1600257600">- Update to version 1.0+20200702.2f043da:
  * transport: Check fcntl return value
  * transport: setsockopt failures are not critical
  * pacemaker: Change rv handling of pcmk_get_attr
  * pacemaker: Express intention about logical or
  * main: mkdir failure is not critical
  * pacemaker: Handle updated exit code of crm_ticket
  * main: Delete lockfile when signal arrive too early
  * main: Accept longer config and lock file names
  * Fix gcc-10 warnings for multiple definition of pcmk_handler
  * Fix gcc-10 warnings for packed struct members
  * Use pkg-config to configure libxml-2.0</changelog>
  <changelog author="varkoly@suse.com" date="1622116800">- Update to version 1.0+20210519.bfb2f92:
  * config: Remove deprecated net functions
  * configure: drop unnecessary check and define
  * configure: move exec_prefix sanitizer closer to prefix
  * configure: drop dead code
  * configure: drop unnecessary macro
  * configure: use PKG_CONFIG to detect pacemaker user/group
  * configure: use resource-agents pkg-config info to determine ocfdir
  * configure: add BOOTH_PKG_CHECK_VAR macro to wrap PKG_CHECK_VAR
  * configure: detect and init pkg-config with proper macro
  * configure: Simplify libqb detection when libqb is not installed in standard paths
  * [build] ship booth.pc with basic booth build information for downstream packages to use
  * booth.spec: Change naming scheme for upgrades
  * boot.spec.in: Package html files when generated
  * build: Fix building of html docs with asciidoc
  * git-version-gen: Use fallback for git-archive
  * configure: Make sure without-html_man works
  * test: Add compatibility with iproute ss command
  * test: fix the delimiter in the here-string
  * build: Remove bashisms
  * booth.spec: Add fedora compatibility provides
  * build: Add option to enable tests during rpmbuild
  * build: Substitute hauser and haclient in RPM
  * build: Substitute python dependency in RPM
  * build: Substitute glue dependency in RPM
  * build: Substitute asciidoc or asciidoctor for RPM
  * build: Rework build of RPM
  * build: Use git-version-gen
  * configure: Always let automake set python vars
  * build: Delete cov directory on clean
  * build: Make sure tarball contains all needed files
  * build: Remove unneeded OS detection section
  * build: Make generating of HTML man work
- remove applied patch
  test-fix-read-a-issue.patch</changelog>
  <changelog author="mcepl@suse.com" date="1632830400">- Use Python 3 for -test subpackage.</changelog>
  <changelog author="pgajdos@suse.com" date="1659009600">- security update
- added patches
  fix CVE-2022-2553 [bsc#1201946], authfile directive in booth config file is completely ignored
  + booth-CVE-2022-2553.patch</changelog>
</package>
<package pkgid="03062ad1b176c0ede78ff7c0cd6f1fba93eaba974b1741b3371b06cc5d8d0300" name="bpftrace" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="150400.3.2.2"/>
  <changelog author="asarai@suse.com" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
</package>
<package pkgid="64509e3180165224eac5f43c275efc01da05c577b1e7c5d27d08e148384ec170" name="bpftrace" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="150400.3.2.2"/>
  <changelog author="asarai@suse.com" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
</package>
<package pkgid="2f1d75d0a707df218fa7b7dcbf451641f98b2329f9eb6f60e21181b7a9afc676" name="bpftrace" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="150400.3.2.2"/>
  <changelog author="asarai@suse.com" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
</package>
<package pkgid="296e7ee2eb934ff41e0f251956dac59b624429b8c6bc61dedb0c05bb260365cb" name="bpftrace" arch="src">
  <version epoch="0" ver="0.14.0" rel="150400.3.2.2"/>
  <changelog author="asarai@suse.com" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
</package>
<package pkgid="caff940298fbf64b127a96a3e9ae559772b036b1092f3802c3a537be385f19c4" name="bpftrace" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="150400.3.2.2"/>
  <changelog author="asarai@suse.com" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
</package>
<package pkgid="bad418b711e8f59f9ba8e4487e7b393ecdcddd7365242cce96c422cfbe1fc175" name="bpftrace" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="150400.3.5.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
  <changelog author="pgajdos@suse.com" date="1655812800">- do not link against the shared BFD libraries [bsc#1200630]</changelog>
</package>
<package pkgid="67b249ab51017954d888f445f88c955e449daed1a0df50e2acb458b0afbac4e2" name="bpftrace" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="150400.3.5.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
  <changelog author="pgajdos@suse.com" date="1655812800">- do not link against the shared BFD libraries [bsc#1200630]</changelog>
</package>
<package pkgid="f5c75ad4670126903ef189c2d2610e4a93e7a905ec1d2bcce51de99729312cd4" name="bpftrace" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="150400.3.5.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
  <changelog author="pgajdos@suse.com" date="1655812800">- do not link against the shared BFD libraries [bsc#1200630]</changelog>
</package>
<package pkgid="bfb5a92c9e98869cf11769f121414076d0aee2cd91ff15f27ac3bfa254946c56" name="bpftrace" arch="src">
  <version epoch="0" ver="0.14.0" rel="150400.3.5.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
  <changelog author="pgajdos@suse.com" date="1655812800">- do not link against the shared BFD libraries [bsc#1200630]</changelog>
</package>
<package pkgid="e69f708388df7c1c14af258d32e7a094067a272da5651f3189708747aaca0fe8" name="bpftrace" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="150400.3.5.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
  <changelog author="pgajdos@suse.com" date="1655812800">- do not link against the shared BFD libraries [bsc#1200630]</changelog>
</package>
<package pkgid="7b11e38355f65df74438507a974694f5fca0cff903b78ba6257f4c05d731b778" name="bpftrace-tools" arch="noarch">
  <version epoch="0" ver="0.14.0" rel="150400.3.2.2"/>
  <changelog author="asarai@suse.com" date="1561550400">- Update bpftrace to v0.9.1. Upstream changelog:
  * Additions:
    + Introduce compound assignment operators (+= and friends).
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Add basic support to enums (treat them as constants).
    + Add macro definition support.
    + Add support for arrays and IPv6 for the ntop builtin function.
    + Allow comparison of two string variables.
    + Add pre and post behavior to ++ and -- operators.
  * Breaking changes:
  - Ban kprobes that cause CPU deadlocks.
    + Add unsafe-mode and make default execution mode safe-mode.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
</package>
<package pkgid="6ba2f1b95f4d02f59f045ea36fed1fa2402d422fff0b71431475744db2590c6d" name="bpftrace-tools" arch="noarch">
  <version epoch="0" ver="0.14.0" rel="150400.3.5.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1563019200">- Use %cmake for building, don't set flags manually.
- Use %cmake_install instead of installing manually.
- install-man-dir.patch: Fix installation directory for man pages.
- Fix executable bit for tools.
- Fix shebangs in %prep, use -exec instead of piping to xargs.
- Disable LTO, because -flto=&lt;number&gt; isn't supported by Clang.
  Also LTO is perhaps not so important here.</changelog>
  <changelog author="aojeagarcia@suse.com" date="1566302400">- Add readline missing dependency</changelog>
  <changelog author="mpluskal@suse.com" date="1566302401">- Cleanup using spec-cleaner</changelog>
  <changelog author="glin@suse.com" date="1574164800">- Update bpftrace to v0.9.2
  + New environment variables (BPFTRACE_NO_USER_SYMBOLS,
    BPFTRACE_LOG_SIZE)
  + New probe type: memory watchpoint
  + Support for JSON output
- Exclude armv7 and i586 since bcc doesn't support USDT for these
  two architectures</changelog>
  <changelog author="aloisio@gmx.com" date="1574337600">- Update to version 0.9.3
  * Allow attaching to uprobes at an offset
  * BTF support
  * integer casts
  * integer pointer casts</changelog>
  <changelog author="asarai@suse.com" date="1580472000">- Fix builds on Leap 15.1. This requires quite a bit of trickery related to
  binutils (see boo#1162312), but it's nothing too hard.
- Added patch to workaround boo#1162312.
  + boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch</changelog>
  <changelog author="asarai@suse.com" date="1580904000">- Update to bpftrace 0.9.4.
  * New calls: signal, override, strncmp.
  * Support for attaching to `kprobes` at an offset.
  * Support for struct bitfields.
  See the upstream changelog for more details:
    &lt;https://github.com/iovisor/bpftrace/releases/tag/v0.9.4&gt;</changelog>
  <changelog author="idonmez@suse.com" date="1586865600">- Update to version 0.10.0
  * Support for LLVM 9 and LLVM 10 has been added.
  * See the complete changelog at https://github.com/iovisor/bpftrace/releases/tag/v0.10.0
- Drop upstreamed patches:
  - boo1162312-cmake-use-_LIBRARIES-when-testing-for-libbfd-version.patch
  - install-man-dir.patch</changelog>
  <changelog author="asarai@suse.com" date="1594814400">- Update to bpftrace 0.11.0.</changelog>
  <changelog author="asarai@suse.com" date="1604145600">- Update to bpftrace 0.11.2.
  * Support for LLVM 11.</changelog>
  <changelog author="mrueckert@suse.de" date="1604923200">- added detect-7-arg-bpf_attach_uprobe.patch:
  fix build with new bpf_attach_uprobe in TW</changelog>
  <changelog author="asarai@suse.com" date="1605355200">- Update to bpftrace 0.11.4.
  * Alpine build bug fix release
  * bcc 0.17 support release
- Remove upstreamed patches:
  - detect-7-arg-bpf_attach_uprobe.patch</changelog>
  <changelog author="asarai@suse.com" date="1606132800">- Do not strip bpftrace binaries -- bpftrace depends on debuginfos for
  /proc/self/exe in order to implement the BEGIN trigger. bsc#1178928</changelog>
  <changelog author="glin@suse.com" date="1610107200">- Add bpftrace-bsc1180670-sync-man-page-and-help.patch to sync
  man page and help (bsc1180670)</changelog>
  <changelog author="asarai@suse.com" date="1617451200">- Update to bpftrace 0.12.0.
  + add path, macaddr, strftime builtin
  + allow wildcards for tracepoint categories
  + add wildcard support for kfunc probe types
  + support scientific notation for integer literals
  + list retprobes
  + resolve unknown typedefs using BTF and give a hint when a type cannot be found
  + support multi-matched globbed targets for uprobe and ustd probes
  + positional parameters: support numbers as strings and params as string literals
  + support for tracepoint __data_loc fields
  + set addrspace info for various builtins
  + support watchpoint for kernel space address
  + support for pointer to pointer
  + support for uprobe refcounts
  + support for usdt arguments utilising the index register and scale
  + printing structures
  - disable str($# + 1)
  * array improvements (support assignment to variables and usage as a map key)
- Remove upstreamed patches:
  - bpftrace-bsc1180670-sync-man-page-and-help.patch</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Update to bpftrace 0.12.1.
  * Incorrect --info output bug fix release</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1633348800">- Update to bpftrace 0.13.0.
    + support for LLVM 12
    + warn if attaching a kprobe to a non-traceable function
    + support for -k[k] and elapsed in iter probes
    + improve JSON printing (nested structs)
    + return 1 from tracepoint probes
    + preserve original order of struct types
  - disallow accessing common tracepoint fields
  - forbid casting from/to struct types</changelog>
  <changelog author="asarai@suse.com" date="1634212800">- Ensure we always use a fixed LLVM major version to match upstream (12 at the
  moment). On Leap we use the latest LLVM (9 at the moment) because 12 is not
  available.</changelog>
  <changelog author="coolo@suse.com" date="1635249600">- Update to 0.14.0
  + Support microsecond timestamps in stftime()
  + Add _ as integer literal digit separator
  + Support for C style integer suffix in parser
  + Add C like pointer arithmetic
  + Automatic resolution of library paths for uprobes
  + Support positional parameters as integer literals
  + Access to uprobe arguments by name
  + Prevent LLVM from unrolling loops
  + Fix memory leaks in struct types
  + Fix strncmp() when N is bigger than on-stack buffer
  + Fix strncmp() to check for NUL terminator
  + Fix unroll() with async calls
  + Fix string comparison codegen
  + Fix verifier error when accessing same tracepoint field twice
  + Fix reading too many bits for &lt;64 bit kfunc args
  + Fix misaligned stack access for map keys
  + Write new man page for bpftrace(8)</changelog>
  <changelog author="pgajdos@suse.com" date="1655812800">- do not link against the shared BFD libraries [bsc#1200630]</changelog>
</package>
<package pkgid="64ec6b15f81f03060c5751968fa194fa2db8c0239c102e9cf714a2f81febb3ff" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.12.1"/>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
</package>
<package pkgid="0a9e68118f5cda2d8975a6f360dc4952736c9e10ae8123f9bf18d77d7fee04ac" name="bsdtar" arch="ppc64le">
  <version epoch="0" ver="3.5.1" rel="150400.3.12.1"/>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
</package>
<package pkgid="21cf43bee686a91dfc93e481072d3410feb80c6129101c8906b54716d1b8510c" name="bsdtar" arch="s390x">
  <version epoch="0" ver="3.5.1" rel="150400.3.12.1"/>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
</package>
<package pkgid="b4406b0e13a4d473bf4a1da3c95a025ee9f1314b058f4461f46b446a0457d5a7" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.12.1"/>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1669118400">- Fix CVE-2022-36227, Handle a calloc returning NULL
  (CVE-2022-36227, bsc#1205629)
  * CVE-2022-36227.patch</changelog>
</package>
<package pkgid="b61e58562ffd651f0efb0899fd313f86e57720d06a37df184264be6123fe0b62" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="6cbe7a0c346725d36b1de179130c17ca4bc2ec7a198c4b6b45b8e757dd0a03b9" name="bsdtar" arch="ppc64le">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="8a975041e905ff9ad90525e940aca5c8122427d2496d92c292cec7d290ab6e8b" name="bsdtar" arch="s390x">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="f4f7c55c9b907bc2a5018a057d682f6b40429d7eedd94bf4b39f526c5a13cca1" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="f51a44ef8873279c834504c49b99093909b9b20c92749b919371eb270b6655e7" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.6.1"/>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
</package>
<package pkgid="9dcf7cb5e88180cc2eb8561dc12f04121737994f107d8bda72dd1cabd5d8a603" name="bsdtar" arch="ppc64le">
  <version epoch="0" ver="3.5.1" rel="150400.3.6.1"/>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
</package>
<package pkgid="c3f272b0c40f45a747183709da85542cb17c760a60a451e7667c9385aba11c44" name="bsdtar" arch="s390x">
  <version epoch="0" ver="3.5.1" rel="150400.3.6.1"/>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
</package>
<package pkgid="e385af65ff886c279656d3830c379ff1ed4568da7ca83f966de395209a9e25e4" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.6.1"/>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
</package>
<package pkgid="fb3684c529585aab46949852476d75377229c372396e4a336bb2832d98d529fe" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.9.1"/>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
</package>
<package pkgid="70b2821d4f42e9bae7963ff682e718b5075d4908fe8aa6c25faf1f668aa3fe24" name="bsdtar" arch="ppc64le">
  <version epoch="0" ver="3.5.1" rel="150400.3.9.1"/>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
</package>
<package pkgid="93eb776bd7c0fc2d44f5240b3f04a5e6272a09bd663758fea3d0a0d2cf42a4c5" name="bsdtar" arch="s390x">
  <version epoch="0" ver="3.5.1" rel="150400.3.9.1"/>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
</package>
<package pkgid="403964885faf3301a6b419ec827e6a0d94d3180ac2c4955248aa030815f6369f" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.9.1"/>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1662984000">- Fix CVE-2021-23177, extracting a symlink with ACLs modifies ACLs of target
  (CVE-2021-23177, bsc#1192425)
  * CVE-2021-23177.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1666353600">- Fix CVE-2021-31566, modifies file flags of symlink target
  (CVE-2021-31566, bsc#1192426.patch)
  CVE-2021-31566.patch
- Fix bsc#1192427, processing fixup entries may follow symbolic links
  bsc1192427.patch</changelog>
</package>
<package pkgid="0150ee3f193242d5604936d862e62907d84ac3eba071d5397769322d7d0c74f5" name="build" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="3122f4aea457b66947cfca0ae43f65213361497a3cb8db9f2b53454704abf161" name="build" arch="src">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="64173e046a9f562610a7cd2c6e4bb1d308c23c4fdb532aeb3d20c64fab5bf043" name="build" arch="noarch">
  <version epoch="0" ver="20220613" rel="150200.12.1"/>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
  <changelog author="adrian@suse.de" date="1651233600">- Stop building aarch64_ilp32 baselibs for aarch64
- avod aio=io_uring for now on SLE15-SP4 workers</changelog>
  <changelog author="adrian@suse.de" date="1653998400">- Revert "avod aio=io_uring for now on SLE15-SP4 workers"
- deb: defer dpkg triggers until all packages are installed, and disable man-db altogether
- Add support of Debian Source format 3.0 (quilt)</changelog>
  <changelog author="adrian@suse.de" date="1655121600">- regression fix for Debian Source format 3.0 (quilt), also adding
  changelog modification now</changelog>
</package>
<package pkgid="6b427c3d30c2cb58e1eefe5dcdcee3c75268e44556b8e81579bd2f07f8228aa6" name="build" arch="src">
  <version epoch="0" ver="20220613" rel="150200.12.1"/>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
  <changelog author="adrian@suse.de" date="1651233600">- Stop building aarch64_ilp32 baselibs for aarch64
- avod aio=io_uring for now on SLE15-SP4 workers</changelog>
  <changelog author="adrian@suse.de" date="1653998400">- Revert "avod aio=io_uring for now on SLE15-SP4 workers"
- deb: defer dpkg triggers until all packages are installed, and disable man-db altogether
- Add support of Debian Source format 3.0 (quilt)</changelog>
  <changelog author="adrian@suse.de" date="1655121600">- regression fix for Debian Source format 3.0 (quilt), also adding
  changelog modification now</changelog>
</package>
<package pkgid="33578e5a1734dac79460ff300f518aebb941ba5da46dfbda51e43a0c454e477b" name="build-initvm-aarch64" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="a709b69baeffb4f1ce24f0ae7049b5ccb191466a77338788b7078f853a472f9d" name="build-initvm-aarch64" arch="noarch">
  <version epoch="0" ver="20220613" rel="150200.12.1"/>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
  <changelog author="adrian@suse.de" date="1651233600">- Stop building aarch64_ilp32 baselibs for aarch64
- avod aio=io_uring for now on SLE15-SP4 workers</changelog>
  <changelog author="adrian@suse.de" date="1653998400">- Revert "avod aio=io_uring for now on SLE15-SP4 workers"
- deb: defer dpkg triggers until all packages are installed, and disable man-db altogether
- Add support of Debian Source format 3.0 (quilt)</changelog>
  <changelog author="adrian@suse.de" date="1655121600">- regression fix for Debian Source format 3.0 (quilt), also adding
  changelog modification now</changelog>
</package>
<package pkgid="9e813fa27f348c9fd954d0c603d175be2aa084639af0e8b13da3ee89372957ee" name="build-initvm-powerpc64le" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="ec58846ae965f0c6287976f5d8f6bf74267dcaa4fca49c5bba3043c0cdc7436d" name="build-initvm-powerpc64le" arch="noarch">
  <version epoch="0" ver="20220613" rel="150200.12.1"/>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
  <changelog author="adrian@suse.de" date="1651233600">- Stop building aarch64_ilp32 baselibs for aarch64
- avod aio=io_uring for now on SLE15-SP4 workers</changelog>
  <changelog author="adrian@suse.de" date="1653998400">- Revert "avod aio=io_uring for now on SLE15-SP4 workers"
- deb: defer dpkg triggers until all packages are installed, and disable man-db altogether
- Add support of Debian Source format 3.0 (quilt)</changelog>
  <changelog author="adrian@suse.de" date="1655121600">- regression fix for Debian Source format 3.0 (quilt), also adding
  changelog modification now</changelog>
</package>
<package pkgid="b8f13dd16316814efceeeb68fb0b35372c5c9efb8d47fe40fc1b79cdc6494636" name="build-initvm-s390x" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="15c63bb903a6f70d21fcc8219852ef77bc9bc494f0669a41cb6595644d67b2df" name="build-initvm-s390x" arch="noarch">
  <version epoch="0" ver="20220613" rel="150200.12.1"/>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
  <changelog author="adrian@suse.de" date="1651233600">- Stop building aarch64_ilp32 baselibs for aarch64
- avod aio=io_uring for now on SLE15-SP4 workers</changelog>
  <changelog author="adrian@suse.de" date="1653998400">- Revert "avod aio=io_uring for now on SLE15-SP4 workers"
- deb: defer dpkg triggers until all packages are installed, and disable man-db altogether
- Add support of Debian Source format 3.0 (quilt)</changelog>
  <changelog author="adrian@suse.de" date="1655121600">- regression fix for Debian Source format 3.0 (quilt), also adding
  changelog modification now</changelog>
</package>
<package pkgid="c95c75fe92deba4ae6bbe0b539ddb081091b4b07e2b834bc8ff06e4587d0c2c3" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="bc17d57798f5527f4dff33ef2bc81108f3fa8a624c596bbf517a403b2f40eb94" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20220613" rel="150200.12.1"/>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
  <changelog author="adrian@suse.de" date="1651233600">- Stop building aarch64_ilp32 baselibs for aarch64
- avod aio=io_uring for now on SLE15-SP4 workers</changelog>
  <changelog author="adrian@suse.de" date="1653998400">- Revert "avod aio=io_uring for now on SLE15-SP4 workers"
- deb: defer dpkg triggers until all packages are installed, and disable man-db altogether
- Add support of Debian Source format 3.0 (quilt)</changelog>
  <changelog author="adrian@suse.de" date="1655121600">- regression fix for Debian Source format 3.0 (quilt), also adding
  changelog modification now</changelog>
</package>
<package pkgid="f00ffb0a6975dcd1d61ffc55ab9010293fb7da425df2e203e3419f3572dcf571" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="bc7d2b079982e0e46cb6500a716993e806f3150e5744e278700684922e1e41a0" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20220613" rel="150200.12.1"/>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
  <changelog author="adrian@suse.de" date="1651233600">- Stop building aarch64_ilp32 baselibs for aarch64
- avod aio=io_uring for now on SLE15-SP4 workers</changelog>
  <changelog author="adrian@suse.de" date="1653998400">- Revert "avod aio=io_uring for now on SLE15-SP4 workers"
- deb: defer dpkg triggers until all packages are installed, and disable man-db altogether
- Add support of Debian Source format 3.0 (quilt)</changelog>
  <changelog author="adrian@suse.de" date="1655121600">- regression fix for Debian Source format 3.0 (quilt), also adding
  changelog modification now</changelog>
</package>
<package pkgid="a95ec5e13109fad94df6869347f16637af4a2c28821cf00723dc49b9d64e0e94" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="e628edad4b5a3bb282855b40648445078790d35a026c0eb46e14e978c057ce37" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20220613" rel="150200.12.1"/>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
  <changelog author="adrian@suse.de" date="1651233600">- Stop building aarch64_ilp32 baselibs for aarch64
- avod aio=io_uring for now on SLE15-SP4 workers</changelog>
  <changelog author="adrian@suse.de" date="1653998400">- Revert "avod aio=io_uring for now on SLE15-SP4 workers"
- deb: defer dpkg triggers until all packages are installed, and disable man-db altogether
- Add support of Debian Source format 3.0 (quilt)</changelog>
  <changelog author="adrian@suse.de" date="1655121600">- regression fix for Debian Source format 3.0 (quilt), also adding
  changelog modification now</changelog>
</package>
<package pkgid="193cd86176f570f0176aaf33c548f66176502a3b4794c97354fdd5fd911c75c9" name="buildah" arch="aarch64">
  <version epoch="0" ver="1.25.1" rel="150400.3.3.28"/>
  <changelog author="cgoll@suse.com" date="1606737600">- added cni to requires as its needed for buildah to run
  (bsc#1187812)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.17.1:
  * tag v1.17.1
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * copier: try to force loading of nsswitch modules before chroot()
  * ADD: handle --chown on URLs
  * imagebuildah: cache should take image format into account
  * Update CI configuration for the release-1.17 branch</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- Update to version 1.19.2:
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/opencontainers/selinux from 1.6.0 to 1.8.0
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * build(deps): bump github.com/containers/common from 0.27.0 to 0.29.0
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev</changelog>
  <changelog author="info@paolostivanin.com" date="1613131200">- Update to version 1.19.4:
  * run: fix check for host pid namespace
  * bump containernetworking/cni library to v0.8.1 - fix for CVE-2021-20206
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Fix build arg check
  * [ci:docs] Fix man page for buildah push
  * Vendor in containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to latest rel-1.19
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf</changelog>
  <changelog author="info@paolostivanin.com" date="1613822400">- Update to version 1.19.6:
  * Bump c/containers/storage v1.24.6
  * Don't fail copy to emptydir
  * Workaround for RHEL gating test failure
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Stop overriding the location of the blob info cache
  * Fix caching layers with build args
  * Vendor in latest containers/image and common</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617019200">- Update to version 1.20.0:
  * Bump to v1.20.0
  * Fix release.sh to generate good releases
  * vendor in containers/storage v1.28.1
  * build(deps): bump github.com/containers/common from 0.35.2 to 0.35.3
  * tests: prefetch: use buildah, not podman, for pulls
  * Use faster way to check image tag existence during multi-arch build
  * Add information about multi-arch images to the Readme
  * COPY --chown: expand the conformance test
  * pkg/chrootuser: use a bufio.Scanner
  * [CI:DOCS] Fix rootful typo in docs
  * build(deps): bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2
  * Add documentation and testing for .containerignore
  * build(deps): bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1
  * build(deps): bump github.com/hashicorp/go-multierror from 1.1.0 to 1.1.1
  * Lookup Containerfile if user specifies a directory
  * Add Tag format placeholder to docs
  * copier: ignore sockets
  * image: propagate errors from extractRootfs
  * Remove system test of 'buildah containers -a'
  * Clarify userns options are usable only as root in man pages
  * Fix system test of 'containers -a'
  * Remove duplicated code in addcopy
  * build(deps): bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1
  * build(deps): bump github.com/onsi/gomega from 1.10.5 to 1.11.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.1 to 1.7.2
  * Update multi-arch buildah build setup with new logic
  * Update nix pin with `make nixpkgs`
  * overlay.bats: fix the "overlay source permissions" test
  * imagebuildah: use overlay for volumes when using overlay
  * Make PolicyMap and PullPolicy names align
  * copier: add GetOptions.IgnoreUnreadable
  * Check local image to match system context
  * fix: Containerfiles - smaller set of userns u/gids
  * Set upperdir permissions based on source
  * Shrink the vendoring size of pkc/cli
  * Clarify image name match failure message
  * ADD/COPY: create the destination directory first, chroot to it
  * copier.GetOptions: add NoDerefSymLinks
  * copier: add an Eval function
  * Update system test for 'from --cap-add/drop'
  * copier: fix a renaming bug
  * copier: return child process stderr if we can't JSON decode the response
  * Add some system tests
  * build(deps): bump github.com/containers/storage from 1.26.0 to 1.27.0
  * complement add/copy --chmod documentation
  * buildah login and logout, do not need to enter user namespace
  * Add multi-arch image build
  * chmod/chown added/fixed in bash completions
  * OWNERS: add @lsm5
  * buildah add/copy --chmod dockerfile implementation
  * bump github.com/openshift/imagebuilder from 1.1.8 to 1.2.0
  * buildah add/copy --chmod cli implementation for files and urls
  * Make sure we set the buildah version label
  * Isolation strings, should match user input
  * [CI:DOCS] buildah-from.md: remove dup arch,os
  * build(deps): bump github.com/containers/image/v5 from 5.10.2 to 5.10.3
  * Cirrus: Temp. disable prior-fedora (F32) testing
  * pr-should-include-tests: recognized "renamed" tests
  * build(deps): bump github.com/sirupsen/logrus from 1.7.0 to 1.8.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.0 to 1.7.1
  * build(deps): bump github.com/containers/common from 0.34.2 to 0.35.0
  * Fix reaping of stages with no instructions
  * add stale bot
  * Add base image name to comment
  * build(deps): bump github.com/spf13/cobra from 1.1.1 to 1.1.3
  * Don't fail copy to emptydir
  * buildah: use volatile containers
  * vendor: update containers/storage
  * Eliminate the use of containers/building import in pkg subdirs
  * Add more support for removing config
  * Improve messages about --cache-from not being supported
  * Revert patch to allow COPY/ADD of empty dirs.
  * Don't fail copy to emptydir
  * Fix tutorial for rootless mode
  * Fix caching layers with build args
  * Vendor in containers/image v5.10.2
  * build(deps): bump github.com/containers/common from 0.34.0 to 0.34.2
  * build(deps): bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0
  * 'make validate': require PRs to include tests
  * build(deps): bump github.com/onsi/gomega from 1.10.4 to 1.10.5
  * build(deps): bump github.com/containers/storage from 1.24.5 to 1.25.0
  * Use chown function for U volume flag from containers/common repository
  * --iidfile: print hash prefix
  * bump containernetworking/cni to v0.8.1 - fix for CVE-2021-20206
  * run: fix check for host pid namespace
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Stop testing directory permissions with latest docker
  * Fix build arg check
  * build(deps): bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0
  * [ci:docs] Fix man page for buildah push
  * Update nix pin with `make nixpkgs`
  * Bump to containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to the latest
  * Add Ashley and Urvashi to Approvers
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf
  * Added required devel packages
  * Cirrus: Native OSX Build
  * Cirrus: Two minor cleanup items
  * Workaround for RHEL gating test failure
  * build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.10 to 1.0.11
  * Reset upstream branch to dev version
  * If destination does not exists, do not throw error
  * Fix version of release to v1.19.1
  * use local image name for pull policy checks
  * Vendor in common 0.33.1
  * Fix conformance test false-failures
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Cirrus: Support new VM Images in get_ci_vm.sh
  * Cirrus: Make tests pass with new VM Images
  * Cirrus: Collect cri-o-runc version
  * Cirrus: Update VM Images + Rearrange tasks
  * Cirrus: Clarify task names / improve readability
  * Stop overriding the location of the blob info cache
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.6 to 1.7.0
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.0-dev
  * Bump to v1.19.0
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * Bump to v1.18.0
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev
  * Bump to v1.17.0
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong https://github.com/containers/podman/issues/7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with `make nixpkgs`
  * Set directory ownership when copied with ID mapping
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map  description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with `make nixpkgs`
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of `manifest add` sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update `manifest add` man page
  * Extend flags of `manifest add`
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * Bump to v1.16.0
  * CI: expand cross-compile checks
  * fix build on 32bit arches
  * StageExecutor.intermediateImageExists: recognize cached images based on scratch
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev
  * Bump to v1.15.0
  * vendor github.com/containers/image/v5@v5.5.1
  * add version centos7 for compatible
  * vendor github.com/containers/common v0.14.0
  * Bump ImageBuilder to v1.1.5
  * Bump github.com/containers/common from 0.12.0 to 0.13.1
  * Bump github.com/containers/storage from 1.20.1 to 1.20.2
  * Bump github.com/seccomp/containers-golang from 0.4.1 to 0.5.0
  * Bump github.com/stretchr/testify from 1.6.0 to 1.6.1
  * Bump github.com/opencontainers/runc from 1.0.0-rc9 to 1.0.0-rc90
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * Bump github.com/stretchr/testify from 1.5.1 to 1.6.0
  * Bump github.com/onsi/ginkgo from 1.12.2 to 1.12.3
  * Vendor in containers/common v0.12.0
  * fix lighttpd example
  * Vendor in new go.etcd.io/bbolt
  * Bump github.com/onsi/ginkgo from 1.12.1 to 1.12.2
  * Bump imagebuilder for ARG fix
  * Bump github.com/containers/common from 0.11.2 to 0.11.4
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Ammended docs
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Bump github.com/opencontainers/go-digest from 1.0.0-rc1 to 1.0.0
  * Bump github.com/onsi/ginkgo from 1.12.0 to 1.12.1
  * Bump github.com/containers/storage from 1.19.1 to 1.19.2
  * Bump github.com/containers/image/v5 from 5.4.3 to 5.4.4
  * Add preliminary profiling support to the CLI
  * Bump github.com/containers/common from 0.10.0 to 0.11.2
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * Bump github.com/containers/storage from 1.19.0 to 1.19.1
  * Bump github.com/sirupsen/logrus from 1.5.0 to 1.6.0
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Bump github.com/fsouza/go-dockerclient from 1.6.4 to 1.6.5
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Bump github.com/containers/common from 0.9.1 to 0.9.5
  * Return exit code from failed containers
  * Bump github.com/containers/storage from 1.18.2 to 1.19.0
  * Bump github.com/containers/common from 0.9.0 to 0.9.1
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Bump github.com/fsouza/go-dockerclient from 1.6.3 to 1.6.4
  * Bump github.com/containers/common from 0.8.1 to 0.9.0
  * Bump back to v1.15.0-dev
  * Bump to v1.14.8
  * Remove warning for systemd inside of container
  * Run (make vendor)
  * Run (make -C tests/tools vendor)
  * Run (go mod tidy) before (go mod vendor) again
  * Fix (make vendor)
  * Bump validation
  * Bump back to v1.15.0-dev
  * Bump to v1.14.7
  * Bump github.com/containers/image/v5 from 5.3.1 to 5.4.3
  * make vendor: run `tidy` after `vendor`
  * Do not skip the directory when the ignore pattern matches
  * Bump github.com/containers/common from 0.7.0 to 0.8.1
  * Downgrade siruspen/logrus from 1.4.2
  * Fix errorf conventions
  * dockerignore tests : remove symlinks, rework
  * Bump back to v1.15.0-dev
  * Bump to v1.14.6
  * bud.bats - cleanup, refactoring
  * vendor in latest containers/storage 1.18.0 and containers/common v0.7.0
  * Bump github.com/spf13/cobra from 0.0.6 to 0.0.7
  * Bump github.com/containers/storage from 1.16.5 to 1.17.0
  * Bump github.com/containers/image/v5 from 5.2.1 to 5.3.1
  * Fix Amazon install step
  * Bump back to v1.15.0-dev
  * Bump to v1.14.5
  * Fix bud-build-arg-cache test
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder
  * Update github.com/openshift/imagebuilder to v1.1.4
  * revert #2246 FIPS mode change
  * Add .swp files to .gitignore
  * Bump back to v1.15.0-dev
  * Bump to v1.14.4
  * image with dup layers: we now have one on quay
  * Fix fips-mode check for RHEL8 boxes
  * digest test : make more robust
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands
  * update install steps for Amazon Linux 2
  * Bump github.com/openshift/imagebuilder from 1.1.2 to 1.1.3
  * Add comment for RUN command in volume ownership test
  * Run stat command directly for volume ownership test
  * vendor in containers/common v0.6.1
  * Cleanup go.sum
  * Bump back to v1.15.0-dev
  * Bump to v1.14.3
  * Update containers/storage to v1.16.5
  * Bump github.com/containers/storage from 1.16.2 to 1.16.4
  * Bump github.com/openshift/imagebuilder from 1.1.1 to 1.1.2
  * Update github.com/openshift/imagebuilder vendoring
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Bump containers/common and opencontainers/selinux versions
  * Add tests for volume ownership
  * Preserve volume uid and gid through subsequent commands
  * Fix FORWARD_NULL errors found by Coverity
  * Bump github.com/containers/storage from 1.16.1 to 1.16.2
  * Fix errors found by codespell
  * Bump back to v1.15.0-dev
  * Bump to v1.14.2
  * Add Pull Request Template
  * Bump to containers/storage v1.16.1
  * run_linux: fix tight loop if file is not pollable
  * Bump github.com/opencontainers/selinux from 1.3.2 to 1.3.3
  * Bump github.com/containers/common from 0.4.1 to 0.4.2
  * Bump back to v1.15.0-dev
  * Bump to v1.14.1
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * BATS : in teardown, umount stale mounts
  * Add Containerfile to build a versioned stable image on quay.io
  * Bump github.com/spf13/cobra from 0.0.5 to 0.0.6
  * Bump github.com/fsouza/go-dockerclient from 1.6.1 to 1.6.3
  * Bump github.com/stretchr/testify from 1.4.0 to 1.5.1
  * Replace unix with syscall to allow vendoring into libpod
  * Update to containers/common v0.4.1
  * Improve remote manifest retrieval
  * Fix minor spelling errors in containertools README
  * Clear the right variable in buildahimage
  * Correct a couple of incorrect format specifiers
  * Update to containers/common v0.3.0
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $PATH
  * getDateAndDigestAndSize(): handle creation time not being set
  * Bump github.com/containers/common from 0.2.0 to 0.2.1
  * include installation steps for CentOS 8 and Stream
  * include installation steps for CentOS7 and forks
  * Adjust Ubuntu install info to also work on Pop!_OS
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1
  * pull/from/commit/push: retry on most failures
  * Makefile: fix install.cni.sudo
  * Repair buildah so it can use containers.conf on the server side
  * Bump github.com/mattn/go-shellwords from 1.0.9 to 1.0.10
  * Bump github.com/fsouza/go-dockerclient from 1.6.0 to 1.6.1
  * Fixing formatting &amp; build instructions
  * Add Code of Conduct
  * Bors: Fix no. req. github reviews
  * Cirrus+Bors: Simplify temp branch skipping
  * Bors-ng: Add documentation and status-icon
  * Bump github.com/onsi/ginkgo from 1.11.0 to 1.12.0
  * fix XDG_RUNTIME_DIR for authfile
  * Bump to v1.15.0-dev
  * Bump to v1.14.0
  * Cirrus: Disable F29 testing
  * Cirrus: Add jq package
  * Cirrus: Fix lint + validation using wrong epoch
  * Stop using fedorproject registry
  * Bors: Workaround ineffective required statuses
  * Bors: Enable app + Disable Travis
  * Cirrus: Add standardized log-collection
  * Cirrus: Improve automated lint + validation
  * Allow passing options to golangci-lint
  * Cirrus: Fixes from review feedback
  * Cirrus: Temporarily ignore VM testing failures
  * Cirrus: Migrate off papr + implement VM testing
  * Cirrus: Update packages + fixes for get_ci_vm.sh
  * Show validation command-line
  * Skip overlay test w/ vfs driver
  * use alpine, not centos, for various tests
  * manifest add: always read the individual image manifest
  * Flake handling: cache and prefetch images
  * Close tarSource when finished using it
  * bump github.com/mtrmac/gpgme
  * Update containers/common to v0.1.4
  * manifest push: add --format option
  * Bump github.com/onsi/gomega from 1.8.1 to 1.9.0
  * vendor github.com/containers/image/v5@v5.2.0
  * info test: deal with random key order
  * Bump back to v1.14.0-dev
  * Bump to v1.13.2
  * selinux spc test: fix CI breakage
  * sign test: fix gpg failure on Rawhide
  * Adjust copy destination for linked tar files in ADD
  * sign.bats: set GPG_TTY=/dev/null
  * Fix parse_unsupported.go
  * getDateAndDigestAndSize(): use manifest.Digest
  * Bump github.com/opencontainers/selinux from 1.3.0 to 1.3.1
  * Bump github.com/containers/common from 0.1.0 to 0.1.2
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * Bump github.com/mattn/go-shellwords from 1.0.7 to 1.0.9
  * copy.bats: make sure we detect failures due to missing source
  * parse: don't complain about not being able to rename something to itself
  * Makefile: use a $(GO_TEST) macro, fix a typo
  * manifests: unit test fix
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Bump c/storage to v1.15.7
  * add --sign-by to bud/commit/push, --remove-signatures for pull/push
  * Remove cut/paste error in CHANGELOG.md
  * Update vendor of containers/common to v0.1.0
  * update install instructions for Debian, Raspbian and Ubuntu
  * Add support for containers.conf
  * Bump back to v1.14.0-dev
  * Bump to v1.13.1
  * Bump github.com/containers/common from 0.0.5 to 0.0.7
  * Bump github.com/onsi/ginkgo from 1.10.3 to 1.11.0
  * Bump github.com/pkg/errors from 0.8.1 to 0.9.0
  * Bump github.com/onsi/gomega from 1.7.1 to 1.8.1
  * Add codespell support
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Travis: rm go 1.12.x
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * update openshift/api
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * Fix image reference in tutorial 4
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Bump to v1.14.0-dev
  * Bump to v1.13.0
  * Bump to c/storage v1.15.5
  * Update container/storage to v1.15.4
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR
  * WIP: safer test for pull --all-tags
  * BATS major cleanup: blobcache.bats: refactor
  * BATS major cleanup: part 4: manual stuff
  * BATS major cleanup, step 3: yet more run_buildah
  * BATS major cleanup, part 2: use more run_buildah
  * BATS major cleanup, part 1: log-level
  * Bump github.com/containers/image/v5 from 5.0.0 to 5.1.0
  * Bump github.com/containers/common from 0.0.3 to 0.0.5
  * Bump to v1.13.0-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1618488000">- Update to version 1.20.1:
  * Bump to v1.20.1
  * Run container with isolation type set at 'from'
  * bats helpers.bash - minor refactoring
  * Bump containers/storage vendor to v1.29.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1
  * Cirrus: Update VMs w/ F34beta
  * CLI add/copy: add a --from option
  * build(deps): bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0
  * Add authentication system tests for 'commit' and 'bud'
  * fix local image lookup for custom platform
  * Double-check existence of OCI runtimes
  * Cirrus: Make use of shared get_ci_vm container
  * Add system tests of "buildah run"
  * Update nix pin with `make nixpkgs`
  * Remove some stuttering on returns errors
  * Setup alias for --tty to --terminal
  * Add conformance tests for COPY /...
  * Put a few more minutes on the clock for the CI conformance test
  * Add a conformance test for COPY --from $symlink
  * Add conformance tests for COPY ""
  * Check for symlink in builtin volume
  * Sort all mounts by destination directory
  * System-test cleanup
  * Export parse.Platform string to be used by podman-remote
  * blobcache: fix sequencing error
  * build(deps): bump github.com/containers/common from 0.35.3 to 0.35.4
  * Fix URL in demos/buildah_multi_stage.sh
  * Add a few system tests
  * [NO TESTS NEEDED] Use --recurse-modules when building git context
  * Bump to v1.20.1-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
</package>
<package pkgid="5363cedf8f8a8b99be1df4db84f56dedb7d967299550a040495c0c94b3b1e16d" name="buildah" arch="ppc64le">
  <version epoch="0" ver="1.25.1" rel="150400.3.3.28"/>
  <changelog author="cgoll@suse.com" date="1606737600">- added cni to requires as its needed for buildah to run
  (bsc#1187812)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.17.1:
  * tag v1.17.1
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * copier: try to force loading of nsswitch modules before chroot()
  * ADD: handle --chown on URLs
  * imagebuildah: cache should take image format into account
  * Update CI configuration for the release-1.17 branch</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- Update to version 1.19.2:
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/opencontainers/selinux from 1.6.0 to 1.8.0
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * build(deps): bump github.com/containers/common from 0.27.0 to 0.29.0
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev</changelog>
  <changelog author="info@paolostivanin.com" date="1613131200">- Update to version 1.19.4:
  * run: fix check for host pid namespace
  * bump containernetworking/cni library to v0.8.1 - fix for CVE-2021-20206
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Fix build arg check
  * [ci:docs] Fix man page for buildah push
  * Vendor in containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to latest rel-1.19
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf</changelog>
  <changelog author="info@paolostivanin.com" date="1613822400">- Update to version 1.19.6:
  * Bump c/containers/storage v1.24.6
  * Don't fail copy to emptydir
  * Workaround for RHEL gating test failure
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Stop overriding the location of the blob info cache
  * Fix caching layers with build args
  * Vendor in latest containers/image and common</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617019200">- Update to version 1.20.0:
  * Bump to v1.20.0
  * Fix release.sh to generate good releases
  * vendor in containers/storage v1.28.1
  * build(deps): bump github.com/containers/common from 0.35.2 to 0.35.3
  * tests: prefetch: use buildah, not podman, for pulls
  * Use faster way to check image tag existence during multi-arch build
  * Add information about multi-arch images to the Readme
  * COPY --chown: expand the conformance test
  * pkg/chrootuser: use a bufio.Scanner
  * [CI:DOCS] Fix rootful typo in docs
  * build(deps): bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2
  * Add documentation and testing for .containerignore
  * build(deps): bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1
  * build(deps): bump github.com/hashicorp/go-multierror from 1.1.0 to 1.1.1
  * Lookup Containerfile if user specifies a directory
  * Add Tag format placeholder to docs
  * copier: ignore sockets
  * image: propagate errors from extractRootfs
  * Remove system test of 'buildah containers -a'
  * Clarify userns options are usable only as root in man pages
  * Fix system test of 'containers -a'
  * Remove duplicated code in addcopy
  * build(deps): bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1
  * build(deps): bump github.com/onsi/gomega from 1.10.5 to 1.11.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.1 to 1.7.2
  * Update multi-arch buildah build setup with new logic
  * Update nix pin with `make nixpkgs`
  * overlay.bats: fix the "overlay source permissions" test
  * imagebuildah: use overlay for volumes when using overlay
  * Make PolicyMap and PullPolicy names align
  * copier: add GetOptions.IgnoreUnreadable
  * Check local image to match system context
  * fix: Containerfiles - smaller set of userns u/gids
  * Set upperdir permissions based on source
  * Shrink the vendoring size of pkc/cli
  * Clarify image name match failure message
  * ADD/COPY: create the destination directory first, chroot to it
  * copier.GetOptions: add NoDerefSymLinks
  * copier: add an Eval function
  * Update system test for 'from --cap-add/drop'
  * copier: fix a renaming bug
  * copier: return child process stderr if we can't JSON decode the response
  * Add some system tests
  * build(deps): bump github.com/containers/storage from 1.26.0 to 1.27.0
  * complement add/copy --chmod documentation
  * buildah login and logout, do not need to enter user namespace
  * Add multi-arch image build
  * chmod/chown added/fixed in bash completions
  * OWNERS: add @lsm5
  * buildah add/copy --chmod dockerfile implementation
  * bump github.com/openshift/imagebuilder from 1.1.8 to 1.2.0
  * buildah add/copy --chmod cli implementation for files and urls
  * Make sure we set the buildah version label
  * Isolation strings, should match user input
  * [CI:DOCS] buildah-from.md: remove dup arch,os
  * build(deps): bump github.com/containers/image/v5 from 5.10.2 to 5.10.3
  * Cirrus: Temp. disable prior-fedora (F32) testing
  * pr-should-include-tests: recognized "renamed" tests
  * build(deps): bump github.com/sirupsen/logrus from 1.7.0 to 1.8.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.0 to 1.7.1
  * build(deps): bump github.com/containers/common from 0.34.2 to 0.35.0
  * Fix reaping of stages with no instructions
  * add stale bot
  * Add base image name to comment
  * build(deps): bump github.com/spf13/cobra from 1.1.1 to 1.1.3
  * Don't fail copy to emptydir
  * buildah: use volatile containers
  * vendor: update containers/storage
  * Eliminate the use of containers/building import in pkg subdirs
  * Add more support for removing config
  * Improve messages about --cache-from not being supported
  * Revert patch to allow COPY/ADD of empty dirs.
  * Don't fail copy to emptydir
  * Fix tutorial for rootless mode
  * Fix caching layers with build args
  * Vendor in containers/image v5.10.2
  * build(deps): bump github.com/containers/common from 0.34.0 to 0.34.2
  * build(deps): bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0
  * 'make validate': require PRs to include tests
  * build(deps): bump github.com/onsi/gomega from 1.10.4 to 1.10.5
  * build(deps): bump github.com/containers/storage from 1.24.5 to 1.25.0
  * Use chown function for U volume flag from containers/common repository
  * --iidfile: print hash prefix
  * bump containernetworking/cni to v0.8.1 - fix for CVE-2021-20206
  * run: fix check for host pid namespace
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Stop testing directory permissions with latest docker
  * Fix build arg check
  * build(deps): bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0
  * [ci:docs] Fix man page for buildah push
  * Update nix pin with `make nixpkgs`
  * Bump to containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to the latest
  * Add Ashley and Urvashi to Approvers
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf
  * Added required devel packages
  * Cirrus: Native OSX Build
  * Cirrus: Two minor cleanup items
  * Workaround for RHEL gating test failure
  * build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.10 to 1.0.11
  * Reset upstream branch to dev version
  * If destination does not exists, do not throw error
  * Fix version of release to v1.19.1
  * use local image name for pull policy checks
  * Vendor in common 0.33.1
  * Fix conformance test false-failures
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Cirrus: Support new VM Images in get_ci_vm.sh
  * Cirrus: Make tests pass with new VM Images
  * Cirrus: Collect cri-o-runc version
  * Cirrus: Update VM Images + Rearrange tasks
  * Cirrus: Clarify task names / improve readability
  * Stop overriding the location of the blob info cache
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.6 to 1.7.0
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.0-dev
  * Bump to v1.19.0
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * Bump to v1.18.0
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev
  * Bump to v1.17.0
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong https://github.com/containers/podman/issues/7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with `make nixpkgs`
  * Set directory ownership when copied with ID mapping
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map  description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with `make nixpkgs`
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of `manifest add` sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update `manifest add` man page
  * Extend flags of `manifest add`
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * Bump to v1.16.0
  * CI: expand cross-compile checks
  * fix build on 32bit arches
  * StageExecutor.intermediateImageExists: recognize cached images based on scratch
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev
  * Bump to v1.15.0
  * vendor github.com/containers/image/v5@v5.5.1
  * add version centos7 for compatible
  * vendor github.com/containers/common v0.14.0
  * Bump ImageBuilder to v1.1.5
  * Bump github.com/containers/common from 0.12.0 to 0.13.1
  * Bump github.com/containers/storage from 1.20.1 to 1.20.2
  * Bump github.com/seccomp/containers-golang from 0.4.1 to 0.5.0
  * Bump github.com/stretchr/testify from 1.6.0 to 1.6.1
  * Bump github.com/opencontainers/runc from 1.0.0-rc9 to 1.0.0-rc90
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * Bump github.com/stretchr/testify from 1.5.1 to 1.6.0
  * Bump github.com/onsi/ginkgo from 1.12.2 to 1.12.3
  * Vendor in containers/common v0.12.0
  * fix lighttpd example
  * Vendor in new go.etcd.io/bbolt
  * Bump github.com/onsi/ginkgo from 1.12.1 to 1.12.2
  * Bump imagebuilder for ARG fix
  * Bump github.com/containers/common from 0.11.2 to 0.11.4
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Ammended docs
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Bump github.com/opencontainers/go-digest from 1.0.0-rc1 to 1.0.0
  * Bump github.com/onsi/ginkgo from 1.12.0 to 1.12.1
  * Bump github.com/containers/storage from 1.19.1 to 1.19.2
  * Bump github.com/containers/image/v5 from 5.4.3 to 5.4.4
  * Add preliminary profiling support to the CLI
  * Bump github.com/containers/common from 0.10.0 to 0.11.2
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * Bump github.com/containers/storage from 1.19.0 to 1.19.1
  * Bump github.com/sirupsen/logrus from 1.5.0 to 1.6.0
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Bump github.com/fsouza/go-dockerclient from 1.6.4 to 1.6.5
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Bump github.com/containers/common from 0.9.1 to 0.9.5
  * Return exit code from failed containers
  * Bump github.com/containers/storage from 1.18.2 to 1.19.0
  * Bump github.com/containers/common from 0.9.0 to 0.9.1
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Bump github.com/fsouza/go-dockerclient from 1.6.3 to 1.6.4
  * Bump github.com/containers/common from 0.8.1 to 0.9.0
  * Bump back to v1.15.0-dev
  * Bump to v1.14.8
  * Remove warning for systemd inside of container
  * Run (make vendor)
  * Run (make -C tests/tools vendor)
  * Run (go mod tidy) before (go mod vendor) again
  * Fix (make vendor)
  * Bump validation
  * Bump back to v1.15.0-dev
  * Bump to v1.14.7
  * Bump github.com/containers/image/v5 from 5.3.1 to 5.4.3
  * make vendor: run `tidy` after `vendor`
  * Do not skip the directory when the ignore pattern matches
  * Bump github.com/containers/common from 0.7.0 to 0.8.1
  * Downgrade siruspen/logrus from 1.4.2
  * Fix errorf conventions
  * dockerignore tests : remove symlinks, rework
  * Bump back to v1.15.0-dev
  * Bump to v1.14.6
  * bud.bats - cleanup, refactoring
  * vendor in latest containers/storage 1.18.0 and containers/common v0.7.0
  * Bump github.com/spf13/cobra from 0.0.6 to 0.0.7
  * Bump github.com/containers/storage from 1.16.5 to 1.17.0
  * Bump github.com/containers/image/v5 from 5.2.1 to 5.3.1
  * Fix Amazon install step
  * Bump back to v1.15.0-dev
  * Bump to v1.14.5
  * Fix bud-build-arg-cache test
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder
  * Update github.com/openshift/imagebuilder to v1.1.4
  * revert #2246 FIPS mode change
  * Add .swp files to .gitignore
  * Bump back to v1.15.0-dev
  * Bump to v1.14.4
  * image with dup layers: we now have one on quay
  * Fix fips-mode check for RHEL8 boxes
  * digest test : make more robust
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands
  * update install steps for Amazon Linux 2
  * Bump github.com/openshift/imagebuilder from 1.1.2 to 1.1.3
  * Add comment for RUN command in volume ownership test
  * Run stat command directly for volume ownership test
  * vendor in containers/common v0.6.1
  * Cleanup go.sum
  * Bump back to v1.15.0-dev
  * Bump to v1.14.3
  * Update containers/storage to v1.16.5
  * Bump github.com/containers/storage from 1.16.2 to 1.16.4
  * Bump github.com/openshift/imagebuilder from 1.1.1 to 1.1.2
  * Update github.com/openshift/imagebuilder vendoring
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Bump containers/common and opencontainers/selinux versions
  * Add tests for volume ownership
  * Preserve volume uid and gid through subsequent commands
  * Fix FORWARD_NULL errors found by Coverity
  * Bump github.com/containers/storage from 1.16.1 to 1.16.2
  * Fix errors found by codespell
  * Bump back to v1.15.0-dev
  * Bump to v1.14.2
  * Add Pull Request Template
  * Bump to containers/storage v1.16.1
  * run_linux: fix tight loop if file is not pollable
  * Bump github.com/opencontainers/selinux from 1.3.2 to 1.3.3
  * Bump github.com/containers/common from 0.4.1 to 0.4.2
  * Bump back to v1.15.0-dev
  * Bump to v1.14.1
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * BATS : in teardown, umount stale mounts
  * Add Containerfile to build a versioned stable image on quay.io
  * Bump github.com/spf13/cobra from 0.0.5 to 0.0.6
  * Bump github.com/fsouza/go-dockerclient from 1.6.1 to 1.6.3
  * Bump github.com/stretchr/testify from 1.4.0 to 1.5.1
  * Replace unix with syscall to allow vendoring into libpod
  * Update to containers/common v0.4.1
  * Improve remote manifest retrieval
  * Fix minor spelling errors in containertools README
  * Clear the right variable in buildahimage
  * Correct a couple of incorrect format specifiers
  * Update to containers/common v0.3.0
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $PATH
  * getDateAndDigestAndSize(): handle creation time not being set
  * Bump github.com/containers/common from 0.2.0 to 0.2.1
  * include installation steps for CentOS 8 and Stream
  * include installation steps for CentOS7 and forks
  * Adjust Ubuntu install info to also work on Pop!_OS
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1
  * pull/from/commit/push: retry on most failures
  * Makefile: fix install.cni.sudo
  * Repair buildah so it can use containers.conf on the server side
  * Bump github.com/mattn/go-shellwords from 1.0.9 to 1.0.10
  * Bump github.com/fsouza/go-dockerclient from 1.6.0 to 1.6.1
  * Fixing formatting &amp; build instructions
  * Add Code of Conduct
  * Bors: Fix no. req. github reviews
  * Cirrus+Bors: Simplify temp branch skipping
  * Bors-ng: Add documentation and status-icon
  * Bump github.com/onsi/ginkgo from 1.11.0 to 1.12.0
  * fix XDG_RUNTIME_DIR for authfile
  * Bump to v1.15.0-dev
  * Bump to v1.14.0
  * Cirrus: Disable F29 testing
  * Cirrus: Add jq package
  * Cirrus: Fix lint + validation using wrong epoch
  * Stop using fedorproject registry
  * Bors: Workaround ineffective required statuses
  * Bors: Enable app + Disable Travis
  * Cirrus: Add standardized log-collection
  * Cirrus: Improve automated lint + validation
  * Allow passing options to golangci-lint
  * Cirrus: Fixes from review feedback
  * Cirrus: Temporarily ignore VM testing failures
  * Cirrus: Migrate off papr + implement VM testing
  * Cirrus: Update packages + fixes for get_ci_vm.sh
  * Show validation command-line
  * Skip overlay test w/ vfs driver
  * use alpine, not centos, for various tests
  * manifest add: always read the individual image manifest
  * Flake handling: cache and prefetch images
  * Close tarSource when finished using it
  * bump github.com/mtrmac/gpgme
  * Update containers/common to v0.1.4
  * manifest push: add --format option
  * Bump github.com/onsi/gomega from 1.8.1 to 1.9.0
  * vendor github.com/containers/image/v5@v5.2.0
  * info test: deal with random key order
  * Bump back to v1.14.0-dev
  * Bump to v1.13.2
  * selinux spc test: fix CI breakage
  * sign test: fix gpg failure on Rawhide
  * Adjust copy destination for linked tar files in ADD
  * sign.bats: set GPG_TTY=/dev/null
  * Fix parse_unsupported.go
  * getDateAndDigestAndSize(): use manifest.Digest
  * Bump github.com/opencontainers/selinux from 1.3.0 to 1.3.1
  * Bump github.com/containers/common from 0.1.0 to 0.1.2
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * Bump github.com/mattn/go-shellwords from 1.0.7 to 1.0.9
  * copy.bats: make sure we detect failures due to missing source
  * parse: don't complain about not being able to rename something to itself
  * Makefile: use a $(GO_TEST) macro, fix a typo
  * manifests: unit test fix
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Bump c/storage to v1.15.7
  * add --sign-by to bud/commit/push, --remove-signatures for pull/push
  * Remove cut/paste error in CHANGELOG.md
  * Update vendor of containers/common to v0.1.0
  * update install instructions for Debian, Raspbian and Ubuntu
  * Add support for containers.conf
  * Bump back to v1.14.0-dev
  * Bump to v1.13.1
  * Bump github.com/containers/common from 0.0.5 to 0.0.7
  * Bump github.com/onsi/ginkgo from 1.10.3 to 1.11.0
  * Bump github.com/pkg/errors from 0.8.1 to 0.9.0
  * Bump github.com/onsi/gomega from 1.7.1 to 1.8.1
  * Add codespell support
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Travis: rm go 1.12.x
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * update openshift/api
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * Fix image reference in tutorial 4
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Bump to v1.14.0-dev
  * Bump to v1.13.0
  * Bump to c/storage v1.15.5
  * Update container/storage to v1.15.4
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR
  * WIP: safer test for pull --all-tags
  * BATS major cleanup: blobcache.bats: refactor
  * BATS major cleanup: part 4: manual stuff
  * BATS major cleanup, step 3: yet more run_buildah
  * BATS major cleanup, part 2: use more run_buildah
  * BATS major cleanup, part 1: log-level
  * Bump github.com/containers/image/v5 from 5.0.0 to 5.1.0
  * Bump github.com/containers/common from 0.0.3 to 0.0.5
  * Bump to v1.13.0-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1618488000">- Update to version 1.20.1:
  * Bump to v1.20.1
  * Run container with isolation type set at 'from'
  * bats helpers.bash - minor refactoring
  * Bump containers/storage vendor to v1.29.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1
  * Cirrus: Update VMs w/ F34beta
  * CLI add/copy: add a --from option
  * build(deps): bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0
  * Add authentication system tests for 'commit' and 'bud'
  * fix local image lookup for custom platform
  * Double-check existence of OCI runtimes
  * Cirrus: Make use of shared get_ci_vm container
  * Add system tests of "buildah run"
  * Update nix pin with `make nixpkgs`
  * Remove some stuttering on returns errors
  * Setup alias for --tty to --terminal
  * Add conformance tests for COPY /...
  * Put a few more minutes on the clock for the CI conformance test
  * Add a conformance test for COPY --from $symlink
  * Add conformance tests for COPY ""
  * Check for symlink in builtin volume
  * Sort all mounts by destination directory
  * System-test cleanup
  * Export parse.Platform string to be used by podman-remote
  * blobcache: fix sequencing error
  * build(deps): bump github.com/containers/common from 0.35.3 to 0.35.4
  * Fix URL in demos/buildah_multi_stage.sh
  * Add a few system tests
  * [NO TESTS NEEDED] Use --recurse-modules when building git context
  * Bump to v1.20.1-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
</package>
<package pkgid="64da15e55766efd880fd87e010527d32093ab7d9f33313eac927f629553f1367" name="buildah" arch="s390x">
  <version epoch="0" ver="1.25.1" rel="150400.3.3.28"/>
  <changelog author="cgoll@suse.com" date="1606737600">- added cni to requires as its needed for buildah to run
  (bsc#1187812)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.17.1:
  * tag v1.17.1
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * copier: try to force loading of nsswitch modules before chroot()
  * ADD: handle --chown on URLs
  * imagebuildah: cache should take image format into account
  * Update CI configuration for the release-1.17 branch</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- Update to version 1.19.2:
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/opencontainers/selinux from 1.6.0 to 1.8.0
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * build(deps): bump github.com/containers/common from 0.27.0 to 0.29.0
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev</changelog>
  <changelog author="info@paolostivanin.com" date="1613131200">- Update to version 1.19.4:
  * run: fix check for host pid namespace
  * bump containernetworking/cni library to v0.8.1 - fix for CVE-2021-20206
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Fix build arg check
  * [ci:docs] Fix man page for buildah push
  * Vendor in containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to latest rel-1.19
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf</changelog>
  <changelog author="info@paolostivanin.com" date="1613822400">- Update to version 1.19.6:
  * Bump c/containers/storage v1.24.6
  * Don't fail copy to emptydir
  * Workaround for RHEL gating test failure
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Stop overriding the location of the blob info cache
  * Fix caching layers with build args
  * Vendor in latest containers/image and common</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617019200">- Update to version 1.20.0:
  * Bump to v1.20.0
  * Fix release.sh to generate good releases
  * vendor in containers/storage v1.28.1
  * build(deps): bump github.com/containers/common from 0.35.2 to 0.35.3
  * tests: prefetch: use buildah, not podman, for pulls
  * Use faster way to check image tag existence during multi-arch build
  * Add information about multi-arch images to the Readme
  * COPY --chown: expand the conformance test
  * pkg/chrootuser: use a bufio.Scanner
  * [CI:DOCS] Fix rootful typo in docs
  * build(deps): bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2
  * Add documentation and testing for .containerignore
  * build(deps): bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1
  * build(deps): bump github.com/hashicorp/go-multierror from 1.1.0 to 1.1.1
  * Lookup Containerfile if user specifies a directory
  * Add Tag format placeholder to docs
  * copier: ignore sockets
  * image: propagate errors from extractRootfs
  * Remove system test of 'buildah containers -a'
  * Clarify userns options are usable only as root in man pages
  * Fix system test of 'containers -a'
  * Remove duplicated code in addcopy
  * build(deps): bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1
  * build(deps): bump github.com/onsi/gomega from 1.10.5 to 1.11.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.1 to 1.7.2
  * Update multi-arch buildah build setup with new logic
  * Update nix pin with `make nixpkgs`
  * overlay.bats: fix the "overlay source permissions" test
  * imagebuildah: use overlay for volumes when using overlay
  * Make PolicyMap and PullPolicy names align
  * copier: add GetOptions.IgnoreUnreadable
  * Check local image to match system context
  * fix: Containerfiles - smaller set of userns u/gids
  * Set upperdir permissions based on source
  * Shrink the vendoring size of pkc/cli
  * Clarify image name match failure message
  * ADD/COPY: create the destination directory first, chroot to it
  * copier.GetOptions: add NoDerefSymLinks
  * copier: add an Eval function
  * Update system test for 'from --cap-add/drop'
  * copier: fix a renaming bug
  * copier: return child process stderr if we can't JSON decode the response
  * Add some system tests
  * build(deps): bump github.com/containers/storage from 1.26.0 to 1.27.0
  * complement add/copy --chmod documentation
  * buildah login and logout, do not need to enter user namespace
  * Add multi-arch image build
  * chmod/chown added/fixed in bash completions
  * OWNERS: add @lsm5
  * buildah add/copy --chmod dockerfile implementation
  * bump github.com/openshift/imagebuilder from 1.1.8 to 1.2.0
  * buildah add/copy --chmod cli implementation for files and urls
  * Make sure we set the buildah version label
  * Isolation strings, should match user input
  * [CI:DOCS] buildah-from.md: remove dup arch,os
  * build(deps): bump github.com/containers/image/v5 from 5.10.2 to 5.10.3
  * Cirrus: Temp. disable prior-fedora (F32) testing
  * pr-should-include-tests: recognized "renamed" tests
  * build(deps): bump github.com/sirupsen/logrus from 1.7.0 to 1.8.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.0 to 1.7.1
  * build(deps): bump github.com/containers/common from 0.34.2 to 0.35.0
  * Fix reaping of stages with no instructions
  * add stale bot
  * Add base image name to comment
  * build(deps): bump github.com/spf13/cobra from 1.1.1 to 1.1.3
  * Don't fail copy to emptydir
  * buildah: use volatile containers
  * vendor: update containers/storage
  * Eliminate the use of containers/building import in pkg subdirs
  * Add more support for removing config
  * Improve messages about --cache-from not being supported
  * Revert patch to allow COPY/ADD of empty dirs.
  * Don't fail copy to emptydir
  * Fix tutorial for rootless mode
  * Fix caching layers with build args
  * Vendor in containers/image v5.10.2
  * build(deps): bump github.com/containers/common from 0.34.0 to 0.34.2
  * build(deps): bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0
  * 'make validate': require PRs to include tests
  * build(deps): bump github.com/onsi/gomega from 1.10.4 to 1.10.5
  * build(deps): bump github.com/containers/storage from 1.24.5 to 1.25.0
  * Use chown function for U volume flag from containers/common repository
  * --iidfile: print hash prefix
  * bump containernetworking/cni to v0.8.1 - fix for CVE-2021-20206
  * run: fix check for host pid namespace
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Stop testing directory permissions with latest docker
  * Fix build arg check
  * build(deps): bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0
  * [ci:docs] Fix man page for buildah push
  * Update nix pin with `make nixpkgs`
  * Bump to containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to the latest
  * Add Ashley and Urvashi to Approvers
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf
  * Added required devel packages
  * Cirrus: Native OSX Build
  * Cirrus: Two minor cleanup items
  * Workaround for RHEL gating test failure
  * build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.10 to 1.0.11
  * Reset upstream branch to dev version
  * If destination does not exists, do not throw error
  * Fix version of release to v1.19.1
  * use local image name for pull policy checks
  * Vendor in common 0.33.1
  * Fix conformance test false-failures
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Cirrus: Support new VM Images in get_ci_vm.sh
  * Cirrus: Make tests pass with new VM Images
  * Cirrus: Collect cri-o-runc version
  * Cirrus: Update VM Images + Rearrange tasks
  * Cirrus: Clarify task names / improve readability
  * Stop overriding the location of the blob info cache
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.6 to 1.7.0
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.0-dev
  * Bump to v1.19.0
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * Bump to v1.18.0
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev
  * Bump to v1.17.0
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong https://github.com/containers/podman/issues/7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with `make nixpkgs`
  * Set directory ownership when copied with ID mapping
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map  description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with `make nixpkgs`
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of `manifest add` sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update `manifest add` man page
  * Extend flags of `manifest add`
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * Bump to v1.16.0
  * CI: expand cross-compile checks
  * fix build on 32bit arches
  * StageExecutor.intermediateImageExists: recognize cached images based on scratch
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev
  * Bump to v1.15.0
  * vendor github.com/containers/image/v5@v5.5.1
  * add version centos7 for compatible
  * vendor github.com/containers/common v0.14.0
  * Bump ImageBuilder to v1.1.5
  * Bump github.com/containers/common from 0.12.0 to 0.13.1
  * Bump github.com/containers/storage from 1.20.1 to 1.20.2
  * Bump github.com/seccomp/containers-golang from 0.4.1 to 0.5.0
  * Bump github.com/stretchr/testify from 1.6.0 to 1.6.1
  * Bump github.com/opencontainers/runc from 1.0.0-rc9 to 1.0.0-rc90
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * Bump github.com/stretchr/testify from 1.5.1 to 1.6.0
  * Bump github.com/onsi/ginkgo from 1.12.2 to 1.12.3
  * Vendor in containers/common v0.12.0
  * fix lighttpd example
  * Vendor in new go.etcd.io/bbolt
  * Bump github.com/onsi/ginkgo from 1.12.1 to 1.12.2
  * Bump imagebuilder for ARG fix
  * Bump github.com/containers/common from 0.11.2 to 0.11.4
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Ammended docs
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Bump github.com/opencontainers/go-digest from 1.0.0-rc1 to 1.0.0
  * Bump github.com/onsi/ginkgo from 1.12.0 to 1.12.1
  * Bump github.com/containers/storage from 1.19.1 to 1.19.2
  * Bump github.com/containers/image/v5 from 5.4.3 to 5.4.4
  * Add preliminary profiling support to the CLI
  * Bump github.com/containers/common from 0.10.0 to 0.11.2
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * Bump github.com/containers/storage from 1.19.0 to 1.19.1
  * Bump github.com/sirupsen/logrus from 1.5.0 to 1.6.0
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Bump github.com/fsouza/go-dockerclient from 1.6.4 to 1.6.5
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Bump github.com/containers/common from 0.9.1 to 0.9.5
  * Return exit code from failed containers
  * Bump github.com/containers/storage from 1.18.2 to 1.19.0
  * Bump github.com/containers/common from 0.9.0 to 0.9.1
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Bump github.com/fsouza/go-dockerclient from 1.6.3 to 1.6.4
  * Bump github.com/containers/common from 0.8.1 to 0.9.0
  * Bump back to v1.15.0-dev
  * Bump to v1.14.8
  * Remove warning for systemd inside of container
  * Run (make vendor)
  * Run (make -C tests/tools vendor)
  * Run (go mod tidy) before (go mod vendor) again
  * Fix (make vendor)
  * Bump validation
  * Bump back to v1.15.0-dev
  * Bump to v1.14.7
  * Bump github.com/containers/image/v5 from 5.3.1 to 5.4.3
  * make vendor: run `tidy` after `vendor`
  * Do not skip the directory when the ignore pattern matches
  * Bump github.com/containers/common from 0.7.0 to 0.8.1
  * Downgrade siruspen/logrus from 1.4.2
  * Fix errorf conventions
  * dockerignore tests : remove symlinks, rework
  * Bump back to v1.15.0-dev
  * Bump to v1.14.6
  * bud.bats - cleanup, refactoring
  * vendor in latest containers/storage 1.18.0 and containers/common v0.7.0
  * Bump github.com/spf13/cobra from 0.0.6 to 0.0.7
  * Bump github.com/containers/storage from 1.16.5 to 1.17.0
  * Bump github.com/containers/image/v5 from 5.2.1 to 5.3.1
  * Fix Amazon install step
  * Bump back to v1.15.0-dev
  * Bump to v1.14.5
  * Fix bud-build-arg-cache test
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder
  * Update github.com/openshift/imagebuilder to v1.1.4
  * revert #2246 FIPS mode change
  * Add .swp files to .gitignore
  * Bump back to v1.15.0-dev
  * Bump to v1.14.4
  * image with dup layers: we now have one on quay
  * Fix fips-mode check for RHEL8 boxes
  * digest test : make more robust
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands
  * update install steps for Amazon Linux 2
  * Bump github.com/openshift/imagebuilder from 1.1.2 to 1.1.3
  * Add comment for RUN command in volume ownership test
  * Run stat command directly for volume ownership test
  * vendor in containers/common v0.6.1
  * Cleanup go.sum
  * Bump back to v1.15.0-dev
  * Bump to v1.14.3
  * Update containers/storage to v1.16.5
  * Bump github.com/containers/storage from 1.16.2 to 1.16.4
  * Bump github.com/openshift/imagebuilder from 1.1.1 to 1.1.2
  * Update github.com/openshift/imagebuilder vendoring
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Bump containers/common and opencontainers/selinux versions
  * Add tests for volume ownership
  * Preserve volume uid and gid through subsequent commands
  * Fix FORWARD_NULL errors found by Coverity
  * Bump github.com/containers/storage from 1.16.1 to 1.16.2
  * Fix errors found by codespell
  * Bump back to v1.15.0-dev
  * Bump to v1.14.2
  * Add Pull Request Template
  * Bump to containers/storage v1.16.1
  * run_linux: fix tight loop if file is not pollable
  * Bump github.com/opencontainers/selinux from 1.3.2 to 1.3.3
  * Bump github.com/containers/common from 0.4.1 to 0.4.2
  * Bump back to v1.15.0-dev
  * Bump to v1.14.1
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * BATS : in teardown, umount stale mounts
  * Add Containerfile to build a versioned stable image on quay.io
  * Bump github.com/spf13/cobra from 0.0.5 to 0.0.6
  * Bump github.com/fsouza/go-dockerclient from 1.6.1 to 1.6.3
  * Bump github.com/stretchr/testify from 1.4.0 to 1.5.1
  * Replace unix with syscall to allow vendoring into libpod
  * Update to containers/common v0.4.1
  * Improve remote manifest retrieval
  * Fix minor spelling errors in containertools README
  * Clear the right variable in buildahimage
  * Correct a couple of incorrect format specifiers
  * Update to containers/common v0.3.0
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $PATH
  * getDateAndDigestAndSize(): handle creation time not being set
  * Bump github.com/containers/common from 0.2.0 to 0.2.1
  * include installation steps for CentOS 8 and Stream
  * include installation steps for CentOS7 and forks
  * Adjust Ubuntu install info to also work on Pop!_OS
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1
  * pull/from/commit/push: retry on most failures
  * Makefile: fix install.cni.sudo
  * Repair buildah so it can use containers.conf on the server side
  * Bump github.com/mattn/go-shellwords from 1.0.9 to 1.0.10
  * Bump github.com/fsouza/go-dockerclient from 1.6.0 to 1.6.1
  * Fixing formatting &amp; build instructions
  * Add Code of Conduct
  * Bors: Fix no. req. github reviews
  * Cirrus+Bors: Simplify temp branch skipping
  * Bors-ng: Add documentation and status-icon
  * Bump github.com/onsi/ginkgo from 1.11.0 to 1.12.0
  * fix XDG_RUNTIME_DIR for authfile
  * Bump to v1.15.0-dev
  * Bump to v1.14.0
  * Cirrus: Disable F29 testing
  * Cirrus: Add jq package
  * Cirrus: Fix lint + validation using wrong epoch
  * Stop using fedorproject registry
  * Bors: Workaround ineffective required statuses
  * Bors: Enable app + Disable Travis
  * Cirrus: Add standardized log-collection
  * Cirrus: Improve automated lint + validation
  * Allow passing options to golangci-lint
  * Cirrus: Fixes from review feedback
  * Cirrus: Temporarily ignore VM testing failures
  * Cirrus: Migrate off papr + implement VM testing
  * Cirrus: Update packages + fixes for get_ci_vm.sh
  * Show validation command-line
  * Skip overlay test w/ vfs driver
  * use alpine, not centos, for various tests
  * manifest add: always read the individual image manifest
  * Flake handling: cache and prefetch images
  * Close tarSource when finished using it
  * bump github.com/mtrmac/gpgme
  * Update containers/common to v0.1.4
  * manifest push: add --format option
  * Bump github.com/onsi/gomega from 1.8.1 to 1.9.0
  * vendor github.com/containers/image/v5@v5.2.0
  * info test: deal with random key order
  * Bump back to v1.14.0-dev
  * Bump to v1.13.2
  * selinux spc test: fix CI breakage
  * sign test: fix gpg failure on Rawhide
  * Adjust copy destination for linked tar files in ADD
  * sign.bats: set GPG_TTY=/dev/null
  * Fix parse_unsupported.go
  * getDateAndDigestAndSize(): use manifest.Digest
  * Bump github.com/opencontainers/selinux from 1.3.0 to 1.3.1
  * Bump github.com/containers/common from 0.1.0 to 0.1.2
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * Bump github.com/mattn/go-shellwords from 1.0.7 to 1.0.9
  * copy.bats: make sure we detect failures due to missing source
  * parse: don't complain about not being able to rename something to itself
  * Makefile: use a $(GO_TEST) macro, fix a typo
  * manifests: unit test fix
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Bump c/storage to v1.15.7
  * add --sign-by to bud/commit/push, --remove-signatures for pull/push
  * Remove cut/paste error in CHANGELOG.md
  * Update vendor of containers/common to v0.1.0
  * update install instructions for Debian, Raspbian and Ubuntu
  * Add support for containers.conf
  * Bump back to v1.14.0-dev
  * Bump to v1.13.1
  * Bump github.com/containers/common from 0.0.5 to 0.0.7
  * Bump github.com/onsi/ginkgo from 1.10.3 to 1.11.0
  * Bump github.com/pkg/errors from 0.8.1 to 0.9.0
  * Bump github.com/onsi/gomega from 1.7.1 to 1.8.1
  * Add codespell support
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Travis: rm go 1.12.x
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * update openshift/api
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * Fix image reference in tutorial 4
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Bump to v1.14.0-dev
  * Bump to v1.13.0
  * Bump to c/storage v1.15.5
  * Update container/storage to v1.15.4
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR
  * WIP: safer test for pull --all-tags
  * BATS major cleanup: blobcache.bats: refactor
  * BATS major cleanup: part 4: manual stuff
  * BATS major cleanup, step 3: yet more run_buildah
  * BATS major cleanup, part 2: use more run_buildah
  * BATS major cleanup, part 1: log-level
  * Bump github.com/containers/image/v5 from 5.0.0 to 5.1.0
  * Bump github.com/containers/common from 0.0.3 to 0.0.5
  * Bump to v1.13.0-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1618488000">- Update to version 1.20.1:
  * Bump to v1.20.1
  * Run container with isolation type set at 'from'
  * bats helpers.bash - minor refactoring
  * Bump containers/storage vendor to v1.29.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1
  * Cirrus: Update VMs w/ F34beta
  * CLI add/copy: add a --from option
  * build(deps): bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0
  * Add authentication system tests for 'commit' and 'bud'
  * fix local image lookup for custom platform
  * Double-check existence of OCI runtimes
  * Cirrus: Make use of shared get_ci_vm container
  * Add system tests of "buildah run"
  * Update nix pin with `make nixpkgs`
  * Remove some stuttering on returns errors
  * Setup alias for --tty to --terminal
  * Add conformance tests for COPY /...
  * Put a few more minutes on the clock for the CI conformance test
  * Add a conformance test for COPY --from $symlink
  * Add conformance tests for COPY ""
  * Check for symlink in builtin volume
  * Sort all mounts by destination directory
  * System-test cleanup
  * Export parse.Platform string to be used by podman-remote
  * blobcache: fix sequencing error
  * build(deps): bump github.com/containers/common from 0.35.3 to 0.35.4
  * Fix URL in demos/buildah_multi_stage.sh
  * Add a few system tests
  * [NO TESTS NEEDED] Use --recurse-modules when building git context
  * Bump to v1.20.1-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
</package>
<package pkgid="39559c9c334ea1cf29f3479cffb960aaec8ddf59a9e13bd71a4f3d226d69ddf9" name="buildah" arch="src">
  <version epoch="0" ver="1.25.1" rel="150400.3.3.28"/>
  <changelog author="cgoll@suse.com" date="1606737600">- added cni to requires as its needed for buildah to run
  (bsc#1187812)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.17.1:
  * tag v1.17.1
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * copier: try to force loading of nsswitch modules before chroot()
  * ADD: handle --chown on URLs
  * imagebuildah: cache should take image format into account
  * Update CI configuration for the release-1.17 branch</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- Update to version 1.19.2:
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/opencontainers/selinux from 1.6.0 to 1.8.0
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * build(deps): bump github.com/containers/common from 0.27.0 to 0.29.0
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev</changelog>
  <changelog author="info@paolostivanin.com" date="1613131200">- Update to version 1.19.4:
  * run: fix check for host pid namespace
  * bump containernetworking/cni library to v0.8.1 - fix for CVE-2021-20206
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Fix build arg check
  * [ci:docs] Fix man page for buildah push
  * Vendor in containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to latest rel-1.19
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf</changelog>
  <changelog author="info@paolostivanin.com" date="1613822400">- Update to version 1.19.6:
  * Bump c/containers/storage v1.24.6
  * Don't fail copy to emptydir
  * Workaround for RHEL gating test failure
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Stop overriding the location of the blob info cache
  * Fix caching layers with build args
  * Vendor in latest containers/image and common</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617019200">- Update to version 1.20.0:
  * Bump to v1.20.0
  * Fix release.sh to generate good releases
  * vendor in containers/storage v1.28.1
  * build(deps): bump github.com/containers/common from 0.35.2 to 0.35.3
  * tests: prefetch: use buildah, not podman, for pulls
  * Use faster way to check image tag existence during multi-arch build
  * Add information about multi-arch images to the Readme
  * COPY --chown: expand the conformance test
  * pkg/chrootuser: use a bufio.Scanner
  * [CI:DOCS] Fix rootful typo in docs
  * build(deps): bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2
  * Add documentation and testing for .containerignore
  * build(deps): bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1
  * build(deps): bump github.com/hashicorp/go-multierror from 1.1.0 to 1.1.1
  * Lookup Containerfile if user specifies a directory
  * Add Tag format placeholder to docs
  * copier: ignore sockets
  * image: propagate errors from extractRootfs
  * Remove system test of 'buildah containers -a'
  * Clarify userns options are usable only as root in man pages
  * Fix system test of 'containers -a'
  * Remove duplicated code in addcopy
  * build(deps): bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1
  * build(deps): bump github.com/onsi/gomega from 1.10.5 to 1.11.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.1 to 1.7.2
  * Update multi-arch buildah build setup with new logic
  * Update nix pin with `make nixpkgs`
  * overlay.bats: fix the "overlay source permissions" test
  * imagebuildah: use overlay for volumes when using overlay
  * Make PolicyMap and PullPolicy names align
  * copier: add GetOptions.IgnoreUnreadable
  * Check local image to match system context
  * fix: Containerfiles - smaller set of userns u/gids
  * Set upperdir permissions based on source
  * Shrink the vendoring size of pkc/cli
  * Clarify image name match failure message
  * ADD/COPY: create the destination directory first, chroot to it
  * copier.GetOptions: add NoDerefSymLinks
  * copier: add an Eval function
  * Update system test for 'from --cap-add/drop'
  * copier: fix a renaming bug
  * copier: return child process stderr if we can't JSON decode the response
  * Add some system tests
  * build(deps): bump github.com/containers/storage from 1.26.0 to 1.27.0
  * complement add/copy --chmod documentation
  * buildah login and logout, do not need to enter user namespace
  * Add multi-arch image build
  * chmod/chown added/fixed in bash completions
  * OWNERS: add @lsm5
  * buildah add/copy --chmod dockerfile implementation
  * bump github.com/openshift/imagebuilder from 1.1.8 to 1.2.0
  * buildah add/copy --chmod cli implementation for files and urls
  * Make sure we set the buildah version label
  * Isolation strings, should match user input
  * [CI:DOCS] buildah-from.md: remove dup arch,os
  * build(deps): bump github.com/containers/image/v5 from 5.10.2 to 5.10.3
  * Cirrus: Temp. disable prior-fedora (F32) testing
  * pr-should-include-tests: recognized "renamed" tests
  * build(deps): bump github.com/sirupsen/logrus from 1.7.0 to 1.8.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.0 to 1.7.1
  * build(deps): bump github.com/containers/common from 0.34.2 to 0.35.0
  * Fix reaping of stages with no instructions
  * add stale bot
  * Add base image name to comment
  * build(deps): bump github.com/spf13/cobra from 1.1.1 to 1.1.3
  * Don't fail copy to emptydir
  * buildah: use volatile containers
  * vendor: update containers/storage
  * Eliminate the use of containers/building import in pkg subdirs
  * Add more support for removing config
  * Improve messages about --cache-from not being supported
  * Revert patch to allow COPY/ADD of empty dirs.
  * Don't fail copy to emptydir
  * Fix tutorial for rootless mode
  * Fix caching layers with build args
  * Vendor in containers/image v5.10.2
  * build(deps): bump github.com/containers/common from 0.34.0 to 0.34.2
  * build(deps): bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0
  * 'make validate': require PRs to include tests
  * build(deps): bump github.com/onsi/gomega from 1.10.4 to 1.10.5
  * build(deps): bump github.com/containers/storage from 1.24.5 to 1.25.0
  * Use chown function for U volume flag from containers/common repository
  * --iidfile: print hash prefix
  * bump containernetworking/cni to v0.8.1 - fix for CVE-2021-20206
  * run: fix check for host pid namespace
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Stop testing directory permissions with latest docker
  * Fix build arg check
  * build(deps): bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0
  * [ci:docs] Fix man page for buildah push
  * Update nix pin with `make nixpkgs`
  * Bump to containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to the latest
  * Add Ashley and Urvashi to Approvers
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf
  * Added required devel packages
  * Cirrus: Native OSX Build
  * Cirrus: Two minor cleanup items
  * Workaround for RHEL gating test failure
  * build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.10 to 1.0.11
  * Reset upstream branch to dev version
  * If destination does not exists, do not throw error
  * Fix version of release to v1.19.1
  * use local image name for pull policy checks
  * Vendor in common 0.33.1
  * Fix conformance test false-failures
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Cirrus: Support new VM Images in get_ci_vm.sh
  * Cirrus: Make tests pass with new VM Images
  * Cirrus: Collect cri-o-runc version
  * Cirrus: Update VM Images + Rearrange tasks
  * Cirrus: Clarify task names / improve readability
  * Stop overriding the location of the blob info cache
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.6 to 1.7.0
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.0-dev
  * Bump to v1.19.0
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * Bump to v1.18.0
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev
  * Bump to v1.17.0
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong https://github.com/containers/podman/issues/7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with `make nixpkgs`
  * Set directory ownership when copied with ID mapping
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map  description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with `make nixpkgs`
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of `manifest add` sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update `manifest add` man page
  * Extend flags of `manifest add`
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * Bump to v1.16.0
  * CI: expand cross-compile checks
  * fix build on 32bit arches
  * StageExecutor.intermediateImageExists: recognize cached images based on scratch
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev
  * Bump to v1.15.0
  * vendor github.com/containers/image/v5@v5.5.1
  * add version centos7 for compatible
  * vendor github.com/containers/common v0.14.0
  * Bump ImageBuilder to v1.1.5
  * Bump github.com/containers/common from 0.12.0 to 0.13.1
  * Bump github.com/containers/storage from 1.20.1 to 1.20.2
  * Bump github.com/seccomp/containers-golang from 0.4.1 to 0.5.0
  * Bump github.com/stretchr/testify from 1.6.0 to 1.6.1
  * Bump github.com/opencontainers/runc from 1.0.0-rc9 to 1.0.0-rc90
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * Bump github.com/stretchr/testify from 1.5.1 to 1.6.0
  * Bump github.com/onsi/ginkgo from 1.12.2 to 1.12.3
  * Vendor in containers/common v0.12.0
  * fix lighttpd example
  * Vendor in new go.etcd.io/bbolt
  * Bump github.com/onsi/ginkgo from 1.12.1 to 1.12.2
  * Bump imagebuilder for ARG fix
  * Bump github.com/containers/common from 0.11.2 to 0.11.4
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Ammended docs
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Bump github.com/opencontainers/go-digest from 1.0.0-rc1 to 1.0.0
  * Bump github.com/onsi/ginkgo from 1.12.0 to 1.12.1
  * Bump github.com/containers/storage from 1.19.1 to 1.19.2
  * Bump github.com/containers/image/v5 from 5.4.3 to 5.4.4
  * Add preliminary profiling support to the CLI
  * Bump github.com/containers/common from 0.10.0 to 0.11.2
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * Bump github.com/containers/storage from 1.19.0 to 1.19.1
  * Bump github.com/sirupsen/logrus from 1.5.0 to 1.6.0
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Bump github.com/fsouza/go-dockerclient from 1.6.4 to 1.6.5
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Bump github.com/containers/common from 0.9.1 to 0.9.5
  * Return exit code from failed containers
  * Bump github.com/containers/storage from 1.18.2 to 1.19.0
  * Bump github.com/containers/common from 0.9.0 to 0.9.1
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Bump github.com/fsouza/go-dockerclient from 1.6.3 to 1.6.4
  * Bump github.com/containers/common from 0.8.1 to 0.9.0
  * Bump back to v1.15.0-dev
  * Bump to v1.14.8
  * Remove warning for systemd inside of container
  * Run (make vendor)
  * Run (make -C tests/tools vendor)
  * Run (go mod tidy) before (go mod vendor) again
  * Fix (make vendor)
  * Bump validation
  * Bump back to v1.15.0-dev
  * Bump to v1.14.7
  * Bump github.com/containers/image/v5 from 5.3.1 to 5.4.3
  * make vendor: run `tidy` after `vendor`
  * Do not skip the directory when the ignore pattern matches
  * Bump github.com/containers/common from 0.7.0 to 0.8.1
  * Downgrade siruspen/logrus from 1.4.2
  * Fix errorf conventions
  * dockerignore tests : remove symlinks, rework
  * Bump back to v1.15.0-dev
  * Bump to v1.14.6
  * bud.bats - cleanup, refactoring
  * vendor in latest containers/storage 1.18.0 and containers/common v0.7.0
  * Bump github.com/spf13/cobra from 0.0.6 to 0.0.7
  * Bump github.com/containers/storage from 1.16.5 to 1.17.0
  * Bump github.com/containers/image/v5 from 5.2.1 to 5.3.1
  * Fix Amazon install step
  * Bump back to v1.15.0-dev
  * Bump to v1.14.5
  * Fix bud-build-arg-cache test
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder
  * Update github.com/openshift/imagebuilder to v1.1.4
  * revert #2246 FIPS mode change
  * Add .swp files to .gitignore
  * Bump back to v1.15.0-dev
  * Bump to v1.14.4
  * image with dup layers: we now have one on quay
  * Fix fips-mode check for RHEL8 boxes
  * digest test : make more robust
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands
  * update install steps for Amazon Linux 2
  * Bump github.com/openshift/imagebuilder from 1.1.2 to 1.1.3
  * Add comment for RUN command in volume ownership test
  * Run stat command directly for volume ownership test
  * vendor in containers/common v0.6.1
  * Cleanup go.sum
  * Bump back to v1.15.0-dev
  * Bump to v1.14.3
  * Update containers/storage to v1.16.5
  * Bump github.com/containers/storage from 1.16.2 to 1.16.4
  * Bump github.com/openshift/imagebuilder from 1.1.1 to 1.1.2
  * Update github.com/openshift/imagebuilder vendoring
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Bump containers/common and opencontainers/selinux versions
  * Add tests for volume ownership
  * Preserve volume uid and gid through subsequent commands
  * Fix FORWARD_NULL errors found by Coverity
  * Bump github.com/containers/storage from 1.16.1 to 1.16.2
  * Fix errors found by codespell
  * Bump back to v1.15.0-dev
  * Bump to v1.14.2
  * Add Pull Request Template
  * Bump to containers/storage v1.16.1
  * run_linux: fix tight loop if file is not pollable
  * Bump github.com/opencontainers/selinux from 1.3.2 to 1.3.3
  * Bump github.com/containers/common from 0.4.1 to 0.4.2
  * Bump back to v1.15.0-dev
  * Bump to v1.14.1
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * BATS : in teardown, umount stale mounts
  * Add Containerfile to build a versioned stable image on quay.io
  * Bump github.com/spf13/cobra from 0.0.5 to 0.0.6
  * Bump github.com/fsouza/go-dockerclient from 1.6.1 to 1.6.3
  * Bump github.com/stretchr/testify from 1.4.0 to 1.5.1
  * Replace unix with syscall to allow vendoring into libpod
  * Update to containers/common v0.4.1
  * Improve remote manifest retrieval
  * Fix minor spelling errors in containertools README
  * Clear the right variable in buildahimage
  * Correct a couple of incorrect format specifiers
  * Update to containers/common v0.3.0
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $PATH
  * getDateAndDigestAndSize(): handle creation time not being set
  * Bump github.com/containers/common from 0.2.0 to 0.2.1
  * include installation steps for CentOS 8 and Stream
  * include installation steps for CentOS7 and forks
  * Adjust Ubuntu install info to also work on Pop!_OS
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1
  * pull/from/commit/push: retry on most failures
  * Makefile: fix install.cni.sudo
  * Repair buildah so it can use containers.conf on the server side
  * Bump github.com/mattn/go-shellwords from 1.0.9 to 1.0.10
  * Bump github.com/fsouza/go-dockerclient from 1.6.0 to 1.6.1
  * Fixing formatting &amp; build instructions
  * Add Code of Conduct
  * Bors: Fix no. req. github reviews
  * Cirrus+Bors: Simplify temp branch skipping
  * Bors-ng: Add documentation and status-icon
  * Bump github.com/onsi/ginkgo from 1.11.0 to 1.12.0
  * fix XDG_RUNTIME_DIR for authfile
  * Bump to v1.15.0-dev
  * Bump to v1.14.0
  * Cirrus: Disable F29 testing
  * Cirrus: Add jq package
  * Cirrus: Fix lint + validation using wrong epoch
  * Stop using fedorproject registry
  * Bors: Workaround ineffective required statuses
  * Bors: Enable app + Disable Travis
  * Cirrus: Add standardized log-collection
  * Cirrus: Improve automated lint + validation
  * Allow passing options to golangci-lint
  * Cirrus: Fixes from review feedback
  * Cirrus: Temporarily ignore VM testing failures
  * Cirrus: Migrate off papr + implement VM testing
  * Cirrus: Update packages + fixes for get_ci_vm.sh
  * Show validation command-line
  * Skip overlay test w/ vfs driver
  * use alpine, not centos, for various tests
  * manifest add: always read the individual image manifest
  * Flake handling: cache and prefetch images
  * Close tarSource when finished using it
  * bump github.com/mtrmac/gpgme
  * Update containers/common to v0.1.4
  * manifest push: add --format option
  * Bump github.com/onsi/gomega from 1.8.1 to 1.9.0
  * vendor github.com/containers/image/v5@v5.2.0
  * info test: deal with random key order
  * Bump back to v1.14.0-dev
  * Bump to v1.13.2
  * selinux spc test: fix CI breakage
  * sign test: fix gpg failure on Rawhide
  * Adjust copy destination for linked tar files in ADD
  * sign.bats: set GPG_TTY=/dev/null
  * Fix parse_unsupported.go
  * getDateAndDigestAndSize(): use manifest.Digest
  * Bump github.com/opencontainers/selinux from 1.3.0 to 1.3.1
  * Bump github.com/containers/common from 0.1.0 to 0.1.2
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * Bump github.com/mattn/go-shellwords from 1.0.7 to 1.0.9
  * copy.bats: make sure we detect failures due to missing source
  * parse: don't complain about not being able to rename something to itself
  * Makefile: use a $(GO_TEST) macro, fix a typo
  * manifests: unit test fix
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Bump c/storage to v1.15.7
  * add --sign-by to bud/commit/push, --remove-signatures for pull/push
  * Remove cut/paste error in CHANGELOG.md
  * Update vendor of containers/common to v0.1.0
  * update install instructions for Debian, Raspbian and Ubuntu
  * Add support for containers.conf
  * Bump back to v1.14.0-dev
  * Bump to v1.13.1
  * Bump github.com/containers/common from 0.0.5 to 0.0.7
  * Bump github.com/onsi/ginkgo from 1.10.3 to 1.11.0
  * Bump github.com/pkg/errors from 0.8.1 to 0.9.0
  * Bump github.com/onsi/gomega from 1.7.1 to 1.8.1
  * Add codespell support
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Travis: rm go 1.12.x
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * update openshift/api
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * Fix image reference in tutorial 4
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Bump to v1.14.0-dev
  * Bump to v1.13.0
  * Bump to c/storage v1.15.5
  * Update container/storage to v1.15.4
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR
  * WIP: safer test for pull --all-tags
  * BATS major cleanup: blobcache.bats: refactor
  * BATS major cleanup: part 4: manual stuff
  * BATS major cleanup, step 3: yet more run_buildah
  * BATS major cleanup, part 2: use more run_buildah
  * BATS major cleanup, part 1: log-level
  * Bump github.com/containers/image/v5 from 5.0.0 to 5.1.0
  * Bump github.com/containers/common from 0.0.3 to 0.0.5
  * Bump to v1.13.0-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1618488000">- Update to version 1.20.1:
  * Bump to v1.20.1
  * Run container with isolation type set at 'from'
  * bats helpers.bash - minor refactoring
  * Bump containers/storage vendor to v1.29.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1
  * Cirrus: Update VMs w/ F34beta
  * CLI add/copy: add a --from option
  * build(deps): bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0
  * Add authentication system tests for 'commit' and 'bud'
  * fix local image lookup for custom platform
  * Double-check existence of OCI runtimes
  * Cirrus: Make use of shared get_ci_vm container
  * Add system tests of "buildah run"
  * Update nix pin with `make nixpkgs`
  * Remove some stuttering on returns errors
  * Setup alias for --tty to --terminal
  * Add conformance tests for COPY /...
  * Put a few more minutes on the clock for the CI conformance test
  * Add a conformance test for COPY --from $symlink
  * Add conformance tests for COPY ""
  * Check for symlink in builtin volume
  * Sort all mounts by destination directory
  * System-test cleanup
  * Export parse.Platform string to be used by podman-remote
  * blobcache: fix sequencing error
  * build(deps): bump github.com/containers/common from 0.35.3 to 0.35.4
  * Fix URL in demos/buildah_multi_stage.sh
  * Add a few system tests
  * [NO TESTS NEEDED] Use --recurse-modules when building git context
  * Bump to v1.20.1-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
</package>
<package pkgid="4142f639d2e0eef9ad612e0fa96b6948ff8754373a3e4c2875d9e6b964bca529" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.25.1" rel="150400.3.3.28"/>
  <changelog author="cgoll@suse.com" date="1606737600">- added cni to requires as its needed for buildah to run
  (bsc#1187812)</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 1.17.1:
  * tag v1.17.1
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * copier: try to force loading of nsswitch modules before chroot()
  * ADD: handle --chown on URLs
  * imagebuildah: cache should take image format into account
  * Update CI configuration for the release-1.17 branch</changelog>
  <changelog author="dmueller@suse.com" date="1611316800">- Update to version 1.19.2:
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/opencontainers/selinux from 1.6.0 to 1.8.0
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * build(deps): bump github.com/containers/common from 0.27.0 to 0.29.0
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev</changelog>
  <changelog author="info@paolostivanin.com" date="1613131200">- Update to version 1.19.4:
  * run: fix check for host pid namespace
  * bump containernetworking/cni library to v0.8.1 - fix for CVE-2021-20206
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Fix build arg check
  * [ci:docs] Fix man page for buildah push
  * Vendor in containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to latest rel-1.19
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf</changelog>
  <changelog author="info@paolostivanin.com" date="1613822400">- Update to version 1.19.6:
  * Bump c/containers/storage v1.24.6
  * Don't fail copy to emptydir
  * Workaround for RHEL gating test failure
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Stop overriding the location of the blob info cache
  * Fix caching layers with build args
  * Vendor in latest containers/image and common</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617019200">- Update to version 1.20.0:
  * Bump to v1.20.0
  * Fix release.sh to generate good releases
  * vendor in containers/storage v1.28.1
  * build(deps): bump github.com/containers/common from 0.35.2 to 0.35.3
  * tests: prefetch: use buildah, not podman, for pulls
  * Use faster way to check image tag existence during multi-arch build
  * Add information about multi-arch images to the Readme
  * COPY --chown: expand the conformance test
  * pkg/chrootuser: use a bufio.Scanner
  * [CI:DOCS] Fix rootful typo in docs
  * build(deps): bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2
  * Add documentation and testing for .containerignore
  * build(deps): bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1
  * build(deps): bump github.com/hashicorp/go-multierror from 1.1.0 to 1.1.1
  * Lookup Containerfile if user specifies a directory
  * Add Tag format placeholder to docs
  * copier: ignore sockets
  * image: propagate errors from extractRootfs
  * Remove system test of 'buildah containers -a'
  * Clarify userns options are usable only as root in man pages
  * Fix system test of 'containers -a'
  * Remove duplicated code in addcopy
  * build(deps): bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1
  * build(deps): bump github.com/onsi/gomega from 1.10.5 to 1.11.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.1 to 1.7.2
  * Update multi-arch buildah build setup with new logic
  * Update nix pin with `make nixpkgs`
  * overlay.bats: fix the "overlay source permissions" test
  * imagebuildah: use overlay for volumes when using overlay
  * Make PolicyMap and PullPolicy names align
  * copier: add GetOptions.IgnoreUnreadable
  * Check local image to match system context
  * fix: Containerfiles - smaller set of userns u/gids
  * Set upperdir permissions based on source
  * Shrink the vendoring size of pkc/cli
  * Clarify image name match failure message
  * ADD/COPY: create the destination directory first, chroot to it
  * copier.GetOptions: add NoDerefSymLinks
  * copier: add an Eval function
  * Update system test for 'from --cap-add/drop'
  * copier: fix a renaming bug
  * copier: return child process stderr if we can't JSON decode the response
  * Add some system tests
  * build(deps): bump github.com/containers/storage from 1.26.0 to 1.27.0
  * complement add/copy --chmod documentation
  * buildah login and logout, do not need to enter user namespace
  * Add multi-arch image build
  * chmod/chown added/fixed in bash completions
  * OWNERS: add @lsm5
  * buildah add/copy --chmod dockerfile implementation
  * bump github.com/openshift/imagebuilder from 1.1.8 to 1.2.0
  * buildah add/copy --chmod cli implementation for files and urls
  * Make sure we set the buildah version label
  * Isolation strings, should match user input
  * [CI:DOCS] buildah-from.md: remove dup arch,os
  * build(deps): bump github.com/containers/image/v5 from 5.10.2 to 5.10.3
  * Cirrus: Temp. disable prior-fedora (F32) testing
  * pr-should-include-tests: recognized "renamed" tests
  * build(deps): bump github.com/sirupsen/logrus from 1.7.0 to 1.8.0
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.0 to 1.7.1
  * build(deps): bump github.com/containers/common from 0.34.2 to 0.35.0
  * Fix reaping of stages with no instructions
  * add stale bot
  * Add base image name to comment
  * build(deps): bump github.com/spf13/cobra from 1.1.1 to 1.1.3
  * Don't fail copy to emptydir
  * buildah: use volatile containers
  * vendor: update containers/storage
  * Eliminate the use of containers/building import in pkg subdirs
  * Add more support for removing config
  * Improve messages about --cache-from not being supported
  * Revert patch to allow COPY/ADD of empty dirs.
  * Don't fail copy to emptydir
  * Fix tutorial for rootless mode
  * Fix caching layers with build args
  * Vendor in containers/image v5.10.2
  * build(deps): bump github.com/containers/common from 0.34.0 to 0.34.2
  * build(deps): bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0
  * 'make validate': require PRs to include tests
  * build(deps): bump github.com/onsi/gomega from 1.10.4 to 1.10.5
  * build(deps): bump github.com/containers/storage from 1.24.5 to 1.25.0
  * Use chown function for U volume flag from containers/common repository
  * --iidfile: print hash prefix
  * bump containernetworking/cni to v0.8.1 - fix for CVE-2021-20206
  * run: fix check for host pid namespace
  * Finish plumbing for buildah bud --manifest
  * buildah manifest add localimage should work
  * Stop testing directory permissions with latest docker
  * Fix build arg check
  * build(deps): bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0
  * [ci:docs] Fix man page for buildah push
  * Update nix pin with `make nixpkgs`
  * Bump to containers/image v5.10.1
  * Rebuild layer if a change in ARG is detected
  * Bump golang.org/x/crypto to the latest
  * Add Ashley and Urvashi to Approvers
  * local image lookup by digest
  * Use build-arg ENV val from local environment if set
  * Pick default OCI Runtime from containers.conf
  * Added required devel packages
  * Cirrus: Native OSX Build
  * Cirrus: Two minor cleanup items
  * Workaround for RHEL gating test failure
  * build(deps): bump github.com/stretchr/testify from 1.6.1 to 1.7.0
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.10 to 1.0.11
  * Reset upstream branch to dev version
  * If destination does not exists, do not throw error
  * Fix version of release to v1.19.1
  * use local image name for pull policy checks
  * Vendor in common 0.33.1
  * Fix conformance test false-failures
  * Fix config-flags-verification test on F33
  * Fix bud capabilities test
  * Cirrus: Support new VM Images in get_ci_vm.sh
  * Cirrus: Make tests pass with new VM Images
  * Cirrus: Collect cri-o-runc version
  * Cirrus: Update VM Images + Rearrange tasks
  * Cirrus: Clarify task names / improve readability
  * Stop overriding the location of the blob info cache
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.6 to 1.7.0
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.0-dev
  * Bump to v1.19.0
  * Update vendor of containers/storage and containers/common
  * Buildah inspect should be able to inspect manifests
  * Make buildah push support pushing manifests lists and digests
  * Fix handling of TMPDIR environment variable
  * Add support for --manifest flags
  * Upper directory should match mode of destination directory
  * Only grab the OS, Arch if the user actually specified them
  * Use --arch and --os and --variant options to select architecture and os
  * Cirrus: Track libseccomp and golang version
  * copier.PutOptions: add an "IgnoreDevices" flag
  * fix: `rmi --prune` when parent image is in store.
  * build(deps): bump github.com/containers/storage from 1.24.3 to 1.24.4
  * build(deps): bump github.com/containers/common from 0.31.1 to 0.31.2
  * Allow users to specify stdin into containers
  * Drop log message on failure to mount on /sys file systems to info
  * Spelling
  * SELinux no longer requires a tag.
  * build(deps): bump github.com/containers/common from 0.31.0 to 0.31.1
  * Update nix pin with `make nixpkgs`
  * Switch references of /var/run -&gt; /run
  * Allow FROM to be overriden with from option
  * copier: don't assume we can chroot() on Unixy systems
  * copier: add PutOptions.NoOverwriteDirNonDir, Get/PutOptions.Rename
  * copier: handle replacing directories with not-directories
  * copier: Put: skip entries with zero-length names
  * build(deps): bump github.com/containers/storage from 1.24.2 to 1.24.3
  * Add U volume flag to chown source volumes
  * Turn off PRIOR_UBUNTU Test until vm is updated
  * pkg, cli: rootless uses correct isolation
  * build(deps): bump github.com/onsi/gomega from 1.10.3 to 1.10.4
  * update installation doc to reflect current status
  * Move away from using docker.io
  * enable short-name aliasing
  * build(deps): bump github.com/containers/storage from 1.24.1 to 1.24.2
  * build(deps): bump github.com/containers/common from 0.30.0 to 0.31.0
  * Throw errors when using bogus --network flags
  * pkg/supplemented test: replace our null blobinfocache
  * build(deps): bump github.com/containers/common from 0.29.0 to 0.30.0
  * inserts forgotten quotation mark
  * Not prefer use local image create/add manifest
  * Add container information to .containerenv
  * Add --ignorefile flag to use alternate .dockerignore flags
  * Add a source debug build
  * Fix crash on invalid filter commands
  * Switch to using containers/common pkg's
  * fix: non-portable shebang #2812
  * Remove copy/paste errors that leaked `Podman` into man pages.
  * Add suggests cpp to spec file
  * Apply suggestions from code review
  * update docs for debian testing and unstable
  * imagebuildah: disable pseudo-terminals for RUN
  * Compute diffID for mapped-layer at creating image source
  * intermediateImageExists: ignore images whose history we can't read
  * Bump to v1.19.0-dev
  * Bump to v1.18.0
  * build(deps): bump github.com/containers/common from 0.26.3 to 0.27.0
  * Fix testing error caused by simultanious merge
  * Vendor in containers/storage v1.24.0
  * short-names aliasing
  * Add --policy flag to buildah pull
  * Stop overwrapping and stuttering
  * copier.Get(): ignore ENOTSUP/ENOSYS when listing xattrs
  * Run: don't forcibly disable UTS namespaces in rootless mode
  * test: ensure non-directory in a Dockerfile path is handled correctly
  * Add a few tests for `pull` command
  * Fix buildah config --cmd to handle array
  * build(deps): bump github.com/containers/storage from 1.23.8 to 1.23.9
  * Fix NPE when Dockerfile path contains non-directory entries
  * Update buildah bud man page from podman build man page
  * Move declaration of decryption-keys to common cli
  * Run: correctly call copier.Mkdir
  * util: digging UID/GID out of os.FileInfo should work on Unix
  * imagebuildah.getImageTypeAndHistoryAndDiffIDs: cache results
  * Verify userns-uid-map and userns-gid-map input
  * Use CPP, CC and flags in dep check scripts
  * Avoid overriding LDFLAGS in Makefile
  * ADD: handle --chown on URLs
  * Update nix pin with `make nixpkgs`
  * (*Builder).Run: MkdirAll: handle EEXIST error
  * copier: try to force loading of nsswitch modules before chroot()
  * fix MkdirAll usage
  * build(deps): bump github.com/containers/common from 0.26.2 to 0.26.3
  * build(deps): bump github.com/containers/storage from 1.23.7 to 1.23.8
  * Use osusergo build tag for static build
  * imagebuildah: cache should take image format into account
  * Bump to v1.18.0-dev
  * Bump to v1.17.0
  * Handle cases where other tools mount/unmount containers
  * overlay.MountReadOnly: support RO overlay mounts
  * overlay: use fusermount for rootless umounts
  * overlay: fix umount
  * Switch default log level of Buildah to Warn. Users need to see these messages
  * Drop error messages about OCI/Docker format to Warning level
  * build(deps): bump github.com/containers/common from 0.26.0 to 0.26.2
  * tests/testreport: adjust for API break in storage v1.23.6
  * build(deps): bump github.com/containers/storage from 1.23.5 to 1.23.7
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.6.6
  * copier: put: ignore Typeflag="g"
  * Use curl to get repo file (fix #2714)
  * build(deps): bump github.com/containers/common from 0.25.0 to 0.26.0
  * build(deps): bump github.com/spf13/cobra from 1.0.0 to 1.1.1
  * Remove docs that refer to bors, since we're not using it
  * Buildah bud should not use stdin by default
  * bump containerd, docker, and golang.org/x/sys
  * Makefile: cross: remove windows.386 target
  * copier.copierHandlerPut: don't check length when there are errors
  * Stop excessive wrapping
  * CI: require that conformance tests pass
  * bump(github.com/openshift/imagebuilder) to v1.1.8
  * Skip tlsVerify insecure BUILD_REGISTRY_SOURCES
  * Fix build path wrong https://github.com/containers/podman/issues/7993
  * refactor pullpolicy to avoid deps
  * build(deps): bump github.com/containers/common from 0.24.0 to 0.25.0
  * CI: run gating tasks with a lot more memory
  * ADD and COPY: descend into excluded directories, sometimes
  * copier: add more context to a couple of error messages
  * copier: check an error earlier
  * copier: log stderr output as debug on success
  * Update nix pin with `make nixpkgs`
  * Set directory ownership when copied with ID mapping
  * Cirrus: Remove bors artifacts
  * Sort build flag definitions alphabetically
  * ADD: only expand archives at the right time
  * Remove configuration for bors
  * Shell Completion for podman build flags
  * Bump c/common to v0.24.0
  * New CI check: xref --help vs man pages
  * CI: re-enable several linters
  * Move --userns-uid-map/--userns-gid-map  description into buildah man page
  * add: preserve ownerships and permissions on ADDed archives
  * Makefile: tweak the cross-compile target
  * Bump containers/common to v0.23.0
  * chroot: create bind mount targets 0755 instead of 0700
  * Change call to Split() to safer SplitN()
  * chroot: fix handling of errno seccomp rules
  * build(deps): bump github.com/containers/image/v5 from 5.5.2 to 5.6.0
  * Add In Progress section to contributing
  * integration tests: make sure tests run in ${topdir}/tests
  * Run(): ignore containers.conf's environment configuration
  * Warn when setting healthcheck in OCI format
  * Cirrus: Skip git-validate on branches
  * tools: update git-validation to the latest commit
  * tools: update golangci-lint to v1.18.0
  * Add a few tests of push command
  * Add(): fix handling of relative paths with no ContextDir
  * build(deps): bump github.com/containers/common from 0.21.0 to 0.22.0
  * Lint: Use same linters as podman
  * Validate: reference HEAD
  * Fix buildah mount to display container names not ids
  * Update nix pin with `make nixpkgs`
  * Add missing --format option in buildah from man page
  * Fix up code based on codespell
  * build(deps): bump github.com/openshift/imagebuilder from 1.1.6 to 1.1.7
  * build(deps): bump github.com/containers/storage from 1.23.4 to 1.23.5
  * Improve buildah completions
  * Cirrus: Fix validate commit epoch
  * Fix bash completion of manifest flags
  * Uniform some man pages
  * Update Buildah Tutorial to address BZ1867426
  * Update bash completion of `manifest add` sub command
  * copier.Get(): hard link targets shouldn't be relative paths
  * build(deps): bump github.com/onsi/gomega from 1.10.1 to 1.10.2
  * Pass timestamp down to history lines
  * Timestamp gets updated everytime you inspect an image
  * bud.bats: use absolute paths in newly-added tests
  * contrib/cirrus/lib.sh: don't use CN for the hostname
  * tests: Add some tests
  * Update `manifest add` man page
  * Extend flags of `manifest add`
  * build(deps): bump github.com/containers/storage from 1.23.3 to 1.23.4
  * build(deps): bump github.com/onsi/ginkgo from 1.14.0 to 1.14.1
  * Bump to v1.17.0-dev
  * Bump to v1.16.0
  * CI: expand cross-compile checks
  * fix build on 32bit arches
  * StageExecutor.intermediateImageExists: recognize cached images based on scratch
  * containerImageRef.NewImageSource(): don't always force timestamps
  * Add fuse module warning to image readme
  * Heed our retry delay option values when retrying commit/pull/push
  * Switch to containers/common for seccomp
  * Use --timestamp rather then --omit-timestamp
  * docs: remove outdated notice
  * docs: remove outdated notice
  * build-using-dockerfile: add a hidden --log-rusage flag
  * build(deps): bump github.com/containers/image/v5 from 5.5.1 to 5.5.2
  * Discard ReportWriter if user sets options.Quiet
  * build(deps): bump github.com/containers/common from 0.19.0 to 0.20.3
  * Fix ownership of content copied using COPY --from
  * newTarDigester: zero out timestamps in tar headers
  * Update nix pin with `make nixpkgs`
  * bud.bats: correct .dockerignore integration tests
  * Use pipes for copying
  * run: include stdout in error message
  * run: use the correct error for errors.Wrapf
  * copier: un-export internal types
  * copier: add Mkdir()
  * in_podman: don't get tripped up by $CIRRUS_CHANGE_TITLE
  * docs/buildah-commit.md: tweak some wording, add a --rm example
  * imagebuildah: don?t blank out destination names when COPYing
  * Replace retry functions with common/pkg/retry
  * StageExecutor.historyMatches: compare timestamps using .Equal
  * Update vendor of containers/common
  * Fix errors found in coverity scan
  * Change namespace handling flags to better match podman commands
  * conformance testing: ignore buildah.BuilderIdentityAnnotation labels
  * Vendor in containers/storage v1.23.0
  * Add buildah.IsContainer interface
  * Avoid feeding run_buildah to pipe
  * fix(buildahimage): add xz dependency in buildah image
  * Bump github.com/containers/common from 0.15.2 to 0.18.0
  * Howto for rootless image building from OpenShift
  * Add --omit-timestamp flag to buildah bud
  * Update nix pin with `make nixpkgs`
  * Shutdown storage on failures
  * Handle COPY --from when an argument is used
  * Bump github.com/seccomp/containers-golang from 0.5.0 to 0.6.0
  * Cirrus: Use newly built VM images
  * Bump github.com/opencontainers/runc from 1.0.0-rc91 to 1.0.0-rc92
  * Enhance the .dockerignore man pages
  * conformance: add a test for COPY from subdirectory
  * fix  bug manifest inspct
  * Add documentation for .dockerignore
  * Add BuilderIdentityAnnotation to identify buildah version
  * DOC: Add quay.io/containers/buildah image to README.md
  * Update buildahimages readme
  * fix spelling mistake in "info" command result display
  * Don't bind /etc/host and /etc/resolv.conf if network is not present
  * blobcache: avoid an unnecessary NewImage()
  * Build static binary with `buildGoModule`
  * copier: split StripSetidBits into StripSetuidBit/StripSetgidBit/StripStickyBit
  * tarFilterer: handle multiple archives
  * Fix a race we hit during conformance tests
  * Rework conformance testing
  * Update 02-registries-repositories.md
  * test-unit: invoke cmd/buildah tests with --flags
  * parse: fix a type mismatch in a test
  * Fix compilation of tests/testreport/testreport
  * build.sh: log the version of Go that we're using
  * test-unit: increase the test timeout to 40/45 minutes
  * Add the "copier" package
  * Fix &amp; add notes regarding problematic language in codebase
  * Add dependency on github.com/stretchr/testify/require
  * CompositeDigester: add the ability to filter tar streams
  * BATS tests: make more robust
  * vendor golang.org/x/text@v0.3.3
  * Switch golang 1.12 to golang 1.13
  * imagebuildah: wait for stages that might not have even started yet
  * chroot, run: not fail on bind mounts from /sys
  * chroot: do not use setgroups if it is blocked
  * Set engine env from containers.conf
  * imagebuildah: return the right stage's image as the "final" image
  * Fix a help string
  * Deduplicate environment variables
  * switch containers/libpod to containers/podman
  * Bump github.com/containers/ocicrypt from 1.0.2 to 1.0.3
  * Bump github.com/opencontainers/selinux from 1.5.2 to 1.6.0
  * Mask out /sys/dev to prevent information leak
  * linux: skip errors from the runtime kill
  * Mask over the /sys/fs/selinux in mask branch
  * Add VFS additional image store to container
  * tests: add auth tests
  * Allow "readonly" as alias to "ro" in mount options
  * Ignore OS X specific consistency mount option
  * Bump github.com/onsi/ginkgo from 1.13.0 to 1.14.0
  * Bump github.com/containers/common from 0.14.0 to 0.15.2
  * Rootless Buildah should default to IsolationOCIRootless
  * imagebuildah: fix inheriting multi-stage builds
  * Make imagebuildah.BuildOptions.Architecture/OS optional
  * Make imagebuildah.BuildOptions.Jobs optional
  * Resolve a possible race in imagebuildah.Executor.startStage()
  * Switch scripts to use containers.conf
  * Bump openshift/imagebuilder to v1.1.6
  * Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
  * buildah, bud: support --jobs=N for parallel execution
  * executor: refactor build code inside new function
  * Add bud regression tests
  * Cirrus: Fix missing htpasswd in registry img
  * docs: clarify the 'triples' format
  * CHANGELOG.md: Fix markdown formatting
  * Add nix derivation for static builds
  * Bump to v1.16.0-dev
  * Bump to v1.15.0
  * vendor github.com/containers/image/v5@v5.5.1
  * add version centos7 for compatible
  * vendor github.com/containers/common v0.14.0
  * Bump ImageBuilder to v1.1.5
  * Bump github.com/containers/common from 0.12.0 to 0.13.1
  * Bump github.com/containers/storage from 1.20.1 to 1.20.2
  * Bump github.com/seccomp/containers-golang from 0.4.1 to 0.5.0
  * Bump github.com/stretchr/testify from 1.6.0 to 1.6.1
  * Bump github.com/opencontainers/runc from 1.0.0-rc9 to 1.0.0-rc90
  * Add CVE-2020-10696 to CHANGELOG.md and changelog.txt
  * Bump github.com/stretchr/testify from 1.5.1 to 1.6.0
  * Bump github.com/onsi/ginkgo from 1.12.2 to 1.12.3
  * Vendor in containers/common v0.12.0
  * fix lighttpd example
  * Vendor in new go.etcd.io/bbolt
  * Bump github.com/onsi/ginkgo from 1.12.1 to 1.12.2
  * Bump imagebuilder for ARG fix
  * Bump github.com/containers/common from 0.11.2 to 0.11.4
  * remove dependency on openshift struct
  * Warn on unset build arguments
  * vendor: update seccomp/containers-golang to v0.4.1
  * Ammended docs
  * Updated docs
  * clean up comments
  * update exit code for tests
  * Implement commit for encryption
  * implementation of encrypt/decrypt push/pull/bud/from
  * fix resolve docker image name as transport
  * Bump github.com/opencontainers/go-digest from 1.0.0-rc1 to 1.0.0
  * Bump github.com/onsi/ginkgo from 1.12.0 to 1.12.1
  * Bump github.com/containers/storage from 1.19.1 to 1.19.2
  * Bump github.com/containers/image/v5 from 5.4.3 to 5.4.4
  * Add preliminary profiling support to the CLI
  * Bump github.com/containers/common from 0.10.0 to 0.11.2
  * Evaluate symlinks in build context directory
  * fix error info about get signatures for containerImageSource
  * Add Security Policy
  * Cirrus: Fixes from review feedback
  * Bump github.com/containers/storage from 1.19.0 to 1.19.1
  * Bump github.com/sirupsen/logrus from 1.5.0 to 1.6.0
  * imagebuildah: stages shouldn't count as their base images
  * Update containers/common v0.10.0
  * Bump github.com/fsouza/go-dockerclient from 1.6.4 to 1.6.5
  * Add registry to buildahimage Dockerfiles
  * Cirrus: Use pre-installed VM packages + F32
  * Cirrus: Re-enable all distro versions
  * Cirrus: Update to F31 + Use cache images
  * golangci-lint: Disable gosimple
  * Lower number of golangci-lint threads
  * Fix permissions on containers.conf
  * Don't force tests to use runc
  * Bump github.com/containers/common from 0.9.1 to 0.9.5
  * Return exit code from failed containers
  * Bump github.com/containers/storage from 1.18.2 to 1.19.0
  * Bump github.com/containers/common from 0.9.0 to 0.9.1
  * cgroup_manager should be under [engine]
  * Use c/common/pkg/auth in login/logout
  * Cirrus: Temporarily disable Ubuntu 19 testing
  * Add containers.conf to stablebyhand build
  * Update gitignore to exclude test Dockerfiles
  * Bump github.com/fsouza/go-dockerclient from 1.6.3 to 1.6.4
  * Bump github.com/containers/common from 0.8.1 to 0.9.0
  * Bump back to v1.15.0-dev
  * Bump to v1.14.8
  * Remove warning for systemd inside of container
  * Run (make vendor)
  * Run (make -C tests/tools vendor)
  * Run (go mod tidy) before (go mod vendor) again
  * Fix (make vendor)
  * Bump validation
  * Bump back to v1.15.0-dev
  * Bump to v1.14.7
  * Bump github.com/containers/image/v5 from 5.3.1 to 5.4.3
  * make vendor: run `tidy` after `vendor`
  * Do not skip the directory when the ignore pattern matches
  * Bump github.com/containers/common from 0.7.0 to 0.8.1
  * Downgrade siruspen/logrus from 1.4.2
  * Fix errorf conventions
  * dockerignore tests : remove symlinks, rework
  * Bump back to v1.15.0-dev
  * Bump to v1.14.6
  * bud.bats - cleanup, refactoring
  * vendor in latest containers/storage 1.18.0 and containers/common v0.7.0
  * Bump github.com/spf13/cobra from 0.0.6 to 0.0.7
  * Bump github.com/containers/storage from 1.16.5 to 1.17.0
  * Bump github.com/containers/image/v5 from 5.2.1 to 5.3.1
  * Fix Amazon install step
  * Bump back to v1.15.0-dev
  * Bump to v1.14.5
  * Fix bud-build-arg-cache test
  * Make image history work correctly with new args handling
  * Don't add args to the RUN environment from the Builder
  * Update github.com/openshift/imagebuilder to v1.1.4
  * revert #2246 FIPS mode change
  * Add .swp files to .gitignore
  * Bump back to v1.15.0-dev
  * Bump to v1.14.4
  * image with dup layers: we now have one on quay
  * Fix fips-mode check for RHEL8 boxes
  * digest test : make more robust
  * Fix potential CVE in tarfile w/ symlink
  * Fix .dockerignore with globs and ! commands
  * update install steps for Amazon Linux 2
  * Bump github.com/openshift/imagebuilder from 1.1.2 to 1.1.3
  * Add comment for RUN command in volume ownership test
  * Run stat command directly for volume ownership test
  * vendor in containers/common v0.6.1
  * Cleanup go.sum
  * Bump back to v1.15.0-dev
  * Bump to v1.14.3
  * Update containers/storage to v1.16.5
  * Bump github.com/containers/storage from 1.16.2 to 1.16.4
  * Bump github.com/openshift/imagebuilder from 1.1.1 to 1.1.2
  * Update github.com/openshift/imagebuilder vendoring
  * Update unshare man page to fix script example
  * Fix compilation errors on non linux platforms
  * Bump containers/common and opencontainers/selinux versions
  * Add tests for volume ownership
  * Preserve volume uid and gid through subsequent commands
  * Fix FORWARD_NULL errors found by Coverity
  * Bump github.com/containers/storage from 1.16.1 to 1.16.2
  * Fix errors found by codespell
  * Bump back to v1.15.0-dev
  * Bump to v1.14.2
  * Add Pull Request Template
  * Bump to containers/storage v1.16.1
  * run_linux: fix tight loop if file is not pollable
  * Bump github.com/opencontainers/selinux from 1.3.2 to 1.3.3
  * Bump github.com/containers/common from 0.4.1 to 0.4.2
  * Bump back to v1.15.0-dev
  * Bump to v1.14.1
  * Search for local runtime per values in containers.conf
  * Set correct ownership on working directory
  * BATS : in teardown, umount stale mounts
  * Add Containerfile to build a versioned stable image on quay.io
  * Bump github.com/spf13/cobra from 0.0.5 to 0.0.6
  * Bump github.com/fsouza/go-dockerclient from 1.6.1 to 1.6.3
  * Bump github.com/stretchr/testify from 1.4.0 to 1.5.1
  * Replace unix with syscall to allow vendoring into libpod
  * Update to containers/common v0.4.1
  * Improve remote manifest retrieval
  * Fix minor spelling errors in containertools README
  * Clear the right variable in buildahimage
  * Correct a couple of incorrect format specifiers
  * Update to containers/common v0.3.0
  * manifest push --format: force an image type, not a list type
  * run: adjust the order in which elements are added to $PATH
  * getDateAndDigestAndSize(): handle creation time not being set
  * Bump github.com/containers/common from 0.2.0 to 0.2.1
  * include installation steps for CentOS 8 and Stream
  * include installation steps for CentOS7 and forks
  * Adjust Ubuntu install info to also work on Pop!_OS
  * Make the commit id clear like Docker
  * Show error on copied file above context directory in build
  * Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1
  * pull/from/commit/push: retry on most failures
  * Makefile: fix install.cni.sudo
  * Repair buildah so it can use containers.conf on the server side
  * Bump github.com/mattn/go-shellwords from 1.0.9 to 1.0.10
  * Bump github.com/fsouza/go-dockerclient from 1.6.0 to 1.6.1
  * Fixing formatting &amp; build instructions
  * Add Code of Conduct
  * Bors: Fix no. req. github reviews
  * Cirrus+Bors: Simplify temp branch skipping
  * Bors-ng: Add documentation and status-icon
  * Bump github.com/onsi/ginkgo from 1.11.0 to 1.12.0
  * fix XDG_RUNTIME_DIR for authfile
  * Bump to v1.15.0-dev
  * Bump to v1.14.0
  * Cirrus: Disable F29 testing
  * Cirrus: Add jq package
  * Cirrus: Fix lint + validation using wrong epoch
  * Stop using fedorproject registry
  * Bors: Workaround ineffective required statuses
  * Bors: Enable app + Disable Travis
  * Cirrus: Add standardized log-collection
  * Cirrus: Improve automated lint + validation
  * Allow passing options to golangci-lint
  * Cirrus: Fixes from review feedback
  * Cirrus: Temporarily ignore VM testing failures
  * Cirrus: Migrate off papr + implement VM testing
  * Cirrus: Update packages + fixes for get_ci_vm.sh
  * Show validation command-line
  * Skip overlay test w/ vfs driver
  * use alpine, not centos, for various tests
  * manifest add: always read the individual image manifest
  * Flake handling: cache and prefetch images
  * Close tarSource when finished using it
  * bump github.com/mtrmac/gpgme
  * Update containers/common to v0.1.4
  * manifest push: add --format option
  * Bump github.com/onsi/gomega from 1.8.1 to 1.9.0
  * vendor github.com/containers/image/v5@v5.2.0
  * info test: deal with random key order
  * Bump back to v1.14.0-dev
  * Bump to v1.13.2
  * selinux spc test: fix CI breakage
  * sign test: fix gpg failure on Rawhide
  * Adjust copy destination for linked tar files in ADD
  * sign.bats: set GPG_TTY=/dev/null
  * Fix parse_unsupported.go
  * getDateAndDigestAndSize(): use manifest.Digest
  * Bump github.com/opencontainers/selinux from 1.3.0 to 1.3.1
  * Bump github.com/containers/common from 0.1.0 to 0.1.2
  * Touch up os/arch doc
  * chroot: handle slightly broken seccomp defaults
  * buildahimage: specify fuse-overlayfs mount options
  * Bump github.com/mattn/go-shellwords from 1.0.7 to 1.0.9
  * copy.bats: make sure we detect failures due to missing source
  * parse: don't complain about not being able to rename something to itself
  * Makefile: use a $(GO_TEST) macro, fix a typo
  * manifests: unit test fix
  * Fix build for 32bit platforms
  * Allow users to set OS and architecture on bud
  * Fix COPY in containerfile with envvar
  * Bump c/storage to v1.15.7
  * add --sign-by to bud/commit/push, --remove-signatures for pull/push
  * Remove cut/paste error in CHANGELOG.md
  * Update vendor of containers/common to v0.1.0
  * update install instructions for Debian, Raspbian and Ubuntu
  * Add support for containers.conf
  * Bump back to v1.14.0-dev
  * Bump to v1.13.1
  * Bump github.com/containers/common from 0.0.5 to 0.0.7
  * Bump github.com/onsi/ginkgo from 1.10.3 to 1.11.0
  * Bump github.com/pkg/errors from 0.8.1 to 0.9.0
  * Bump github.com/onsi/gomega from 1.7.1 to 1.8.1
  * Add codespell support
  * copyFileWithTar: close source files at the right time
  * copy: don't digest files that we ignore
  * Check for .dockerignore specifically
  * Travis: rm go 1.12.x
  * Don't setup excludes, if their is only one pattern to match
  * set HOME env to /root on chroot-isolation by default
  * docs: fix references to containers-*.5
  * update openshift/api
  * fix bug Add check .dockerignore COPY file
  * buildah bud --volume: run from tmpdir, not source dir
  * Fix imageNamePrefix to give consistent names in buildah-from
  * cpp: use -traditional and -undef flags
  * Fix image reference in tutorial 4
  * discard outputs coming from onbuild command on buildah-from --quiet
  * make --format columnizing consistent with buildah images
  * Bump to v1.14.0-dev
  * Bump to v1.13.0
  * Bump to c/storage v1.15.5
  * Update container/storage to v1.15.4
  * Fix option handling for volumes in build
  * Rework overlay pkg for use with libpod
  * Fix buildahimage builds for buildah
  * Add support for FIPS-Mode backends
  * Set the TMPDIR for pulling/pushing image to $TMPDIR
  * WIP: safer test for pull --all-tags
  * BATS major cleanup: blobcache.bats: refactor
  * BATS major cleanup: part 4: manual stuff
  * BATS major cleanup, step 3: yet more run_buildah
  * BATS major cleanup, part 2: use more run_buildah
  * BATS major cleanup, part 1: log-level
  * Bump github.com/containers/image/v5 from 5.0.0 to 5.1.0
  * Bump github.com/containers/common from 0.0.3 to 0.0.5
  * Bump to v1.13.0-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1618488000">- Update to version 1.20.1:
  * Bump to v1.20.1
  * Run container with isolation type set at 'from'
  * bats helpers.bash - minor refactoring
  * Bump containers/storage vendor to v1.29.0
  * build(deps): bump github.com/onsi/ginkgo from 1.16.0 to 1.16.1
  * Cirrus: Update VMs w/ F34beta
  * CLI add/copy: add a --from option
  * build(deps): bump github.com/onsi/ginkgo from 1.15.2 to 1.16.0
  * Add authentication system tests for 'commit' and 'bud'
  * fix local image lookup for custom platform
  * Double-check existence of OCI runtimes
  * Cirrus: Make use of shared get_ci_vm container
  * Add system tests of "buildah run"
  * Update nix pin with `make nixpkgs`
  * Remove some stuttering on returns errors
  * Setup alias for --tty to --terminal
  * Add conformance tests for COPY /...
  * Put a few more minutes on the clock for the CI conformance test
  * Add a conformance test for COPY --from $symlink
  * Add conformance tests for COPY ""
  * Check for symlink in builtin volume
  * Sort all mounts by destination directory
  * System-test cleanup
  * Export parse.Platform string to be used by podman-remote
  * blobcache: fix sequencing error
  * build(deps): bump github.com/containers/common from 0.35.3 to 0.35.4
  * Fix URL in demos/buildah_multi_stage.sh
  * Add a few system tests
  * [NO TESTS NEEDED] Use --recurse-modules when building git context
  * Bump to v1.20.1-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
</package>
<package pkgid="b11de8718df2577b3e0872ef2241eecdcb883c658eb1e9928ca9579efe102b6d" name="buildah" arch="aarch64">
  <version epoch="0" ver="1.27.1" rel="150400.3.8.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
</package>
<package pkgid="a2f85bfd02a661be7eb14295bfe54d81f530de7d37202838499a2425cba4c7c1" name="buildah" arch="ppc64le">
  <version epoch="0" ver="1.27.1" rel="150400.3.8.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
</package>
<package pkgid="b99172c3b6aa93599bcf3142af073ff7a89bbb4893d349c8df62fca1eca42287" name="buildah" arch="s390x">
  <version epoch="0" ver="1.27.1" rel="150400.3.8.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
</package>
<package pkgid="86655b1d0bfc68edbbf63dfbbab53e179c4962dea44d7ac526e4c7180afc5b74" name="buildah" arch="src">
  <version epoch="0" ver="1.27.1" rel="150400.3.8.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
</package>
<package pkgid="21c9dddc3df910cb3ff6cf864e06a19df9bc67aea0c9f1ec6cf395aa2db6e075" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.27.1" rel="150400.3.8.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1621857600">- Update to version 1.21.0:
  * Bump to v1.21.0 - [NO TESTS NEEDED]
  * Don't blow up if cpp detects errors
  * Vendor in containers/common v0.38.4
  * Remove 'buildah run --security-opt' from completion
  * update c/common
  * Fix handling of --default-mounts-file
  * update vendor of containers/storage v1.31.1
  * Bump github.com/containers/storage from 1.30.3 to 1.31.0
  * Send logrus messages back to caller when building
  * github: Fix bad repo. ref in workflow config
  * Check earlier for bad image tags name
  * buildah bud: fix containers/podman/issues/10307
  * Bump github.com/containers/storage from 1.30.1 to 1.30.3
  * Cirrus: Support [CI:DOCS] test skipping
  * Notification email for cirrus-cron build failures
  * Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
  * Fix race condition
  * Fix copy race while walking paths
  * Preserve ownership of lower directory when doing an overlay mount
  * Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
  * Update nix pin with `make nixpkgs`
  * codespell cleanup
  * Multi-arch github-action workflow unification
  * Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
  * Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
  * imagebuildah: ignore signatures when tagging images
  * update to latest libimage
  * Bump github.com/containers/common from 0.37.0 to 0.37.1
  * Bump github.com/containers/storage from 1.30.0 to 1.30.1
  * Upgrade to GitHub-native Dependabot
  * Document location of auth.json file if XDG_RUNTIME_DIR is not set
  * run.bats: fix flake in run-user test
  * Cirrus: Update F34beta -&gt; F34
  * pr-should-include-tests: try to make work in buildah
  * runUsingRuntime: when relaying error from the runtime, mention that
  * Run(): avoid Mkdir() into the rootfs
  * imagebuildah: replace archive with chrootarchive
  * imagebuildah.StageExecutor.volumeCacheSaveVFS(): set up bind mounts
  * conformance: use :Z with transient mounts when SELinux is enabled
  * bud.bats: fix a bats warning
  * imagebuildah: create volume directories when using overlays
  * imagebuildah: drop resolveSymlink()
  * namespaces test - refactoring and cleanup
  * Refactor 'idmapping' system test
  * Cirrus: Update Ubuntu images to 21.04
  * Tiny fixes in bud system tests
  * Add compabitility wrappers for removed packages
  * Fix expected message at pulling image
  * Fix system tests of 'bud' subcommand
  * [CI:DOCS] Update steps for CentOS runc users
  * Add support for secret mounts
  * Add buildah manifest rm command
  * restore push/pull and util API
  * [CI:DOCS] Remove older distro docs
  * Rename rhel secrets to subscriptions
  * vendor in openshift/imagebuilder
  * Remove buildah bud --loglevel ...
  * use new containers/common/libimage package
  * Fix copier when using globs
  * Test namespace flags of 'bud' subcommand
  * Add system test of 'bud' subcommand
  * Output names of multiple tags in buildah bud
  * push to docker test: don't get fooled by podman
  * copier: add Remove()
  * build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
  * Restore log timestamps
  * Add system test of 'buildah help' with a tiny fix
  * tests: copy.bats: fix infinite hang
  * Do not force hard code to crun in rootless mode
  * build(deps): bump github.com/openshift/imagebuilder from 1.2.0 to 1.2.1
  * build(deps): bump github.com/containers/ocicrypt from 1.1.0 to 1.1.1
  * build(deps): bump github.com/containers/common from 0.35.4 to 0.36.0
  * Fix arg missing warning in bud
  * Check without flag in 'from --cgroup-parent' test
  * Minor fixes to Buildah as a library tutorial documentation
  * Add system test of 'buildah version' for packaged buildah
  * Add a few system tests of 'buildah from'
  * Log the final error with %+v at logging level "trace"
  * copier: add GetOptions.NoCrossDevice
  * Update nix pin with `make nixpkgs`
  * Bump to v1.20.2-dev</changelog>
  <changelog author="fvogt@suse.com" date="1626696000">- Set -buildmode=pie properly using GOFLAGS instead of just LDFLAGS
- Exclude building on ppc64, not supported</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 1.21.4:
  * Bump to v1.21.4
  * tests: make it easer to override the location of the copy helper
  * Add and use a "copy" helper instead of podman load/save
  * vendor containers/common@v0.38.16
  * Bump to v1.21.3
  * chroot: fix environment value leakage to intermediate processes
  * [release-1.21] Bump to Buildah v1.21.2
  * vendor common@v0.38.12 and storage@v1.31.3
  * Bump to v1.21.1
  * Fix handling of auth.json file while in a user namespace</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1628251200">- Update to version 1.22.0:
  * Bump to v1.22.0 [NO TESTS NEEDED]
  * c/image, c/storage, c/common vendor before Podman 3.3 release
  * WIP: tests: new assert()
  * Proposed patch for 3399 (shadowutils)
  * Fix handling of --restore shadow-utils
  * build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
  * runtime-flag (debug) test: handle old &amp; new runc
  * build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
  * Allow dst and destination for target in secret mounts
  * Multi-arch: Always push updated version-tagged img
  * Add a few tests on cgroups V2
  * imagebuildah.stageExecutor.prepare(): remove pseudonym check
  * refine dangling filter
  * Chown with environment variables not set should fail
  * Just restore protections of shadow-utils
  * build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
  * Remove specific kernel version number requirement from install.md
  * Multi-arch image workflow: Make steps generic
  * chroot: fix environment value leakage to intermediate processes
  * Update nix pin with `make nixpkgs`
  * buildah source - create and manage source images
  * Update cirrus-cron notification GH workflow
  * Reuse code from containers/common/pkg/parse
  * Cirrus: Freshen VM images
  * Fix excludes exception begining with / or ./
  * Fix syntax for --manifest example
  * build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
  * vendor containers/common@main
  * Cirrus: Drop dependence on fedora-minimal
  * Adjust conformance-test error-message regex
  * Workaround appearance of differing debug messages
  * Cirrus: Install docker from package cache
  * build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
  * Switch rusagelogfile to use options.Out
  * build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
  * Turn stdio back to blocking when command finishes
  * Add support for default network creation
  * Cirrus: Updates for master-&gt;main rename
  * Change references from master to main
  * Add `--env` and `--workingdir` flags to run command
  * build(deps): bump github.com/opencontainers/runc
  * [CI:DOCS] buildah bud: spelling --ignore-file requires parameter
  * [CI:DOCS] push/pull: clarify supported transports
  * Remove unused function arguments
  * Create mountOptions for mount command flags
  * Extract version command implementation to function
  * Add --json flags to `mount` and `version` commands
  * build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
  * build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
  * copier.Put(): set xattrs after ownership
  * buildah add/copy: spelling
  * build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
  * buildah copy and buildah add should support .containerignore
  * Remove unused util.StartsWithValidTransport
  * Fix documentation of the --format option of buildah push
  * Don't use alltransports.ParseImageName with known transports
  * build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
  * man pages: clarify `rmi` removes dangling parents
  * tests: make it easer to override the location of the copy helper
  * build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
  * [CI:DOCS] Fix links to c/image master branch
  * imagebuildah: use the specified logger for logging preprocessing warnings
  * Fix copy into workdir for a single file
  * Fix docs links due to branch rename
  * Update nix pin with `make nixpkgs`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
  * build(deps): bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2
  * build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
  * build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
  * build(deps): bump github.com/mattn/go-shellwords from 1.0.11 to 1.0.12
  * build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
  * fix(docs): typo
  * Move to v1.22.0-dev
  * Fix handling of auth.json file while in a user namespace
  * Add rusage-logfile flag to optionally send rusage to a file
  * imagebuildah: redo step logging
  * build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
  * build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
  * Add volumes to make running buildah within a container easier
  * build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
  * Add and use a "copy" helper instead of podman load/save
  * Bump github.com/containers/common from 0.38.4 to 0.39.0
  * containerImageRef/containerImageSource: don't buffer uncompressed layers
  * containerImageRef(): squashed images have no parent images
  * Sync. workflow across skopeo, buildah, and podman
  * Bump github.com/containers/storage from 1.31.1 to 1.31.2
  * Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
  * Bump to v1.21.1-dev [NO TESTS NEEDED]</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
</package>
<package pkgid="e52712a66280bbd203ca2f5e816e7c0348055b8630d2e4d7f3874cf9d80ed1e3" name="buildah" arch="aarch64">
  <version epoch="0" ver="1.28.2" rel="150400.3.11.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
  <changelog author="dcermak@suse.com" date="1663761600">- Update to version 1.27.2:
  * tag v1.27.2
  * Fix broken command completion
  * build: support --skip-unused-stages for multi-stage builds</changelog>
  <changelog author="dcermak@suse.com" date="1665144000">- Update to version 1.28.0:
  * Bump to v1.28.0
  * No longer modify buildah.spec
  * Update for https://github.com/klauspost/pgzip/pull/50
  * Update vendor containers/(common,image)
  * [CI:DOCS] Add quay-description update reminder
  * vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
  * build(deps): bump github.com/opencontainers/selinux
  * Vendor in latest containers/storage
  * Changing shell list operators from `;` to `&amp;&amp;`
  * Fix buildahimage container.conf permissions regression
  * Set sysctls from containers.conf
  * refactor: stop using Normalize directly from containerd package
  * config,builder: process variant while populating image spec
  * Proof of concept: nightly dependency treadmill
  * Run codespell on code
  * Check for unset build args after TARGET args
  * pkg/cli: improve completion test
  * vendor in latest containers/(common,storage,image)
  * copier: work around freebsd bug for "mkdir /"
  * vendor: update c/image
  * test: run in the host cgroup namespace
  * vendor: update c/storage
  * vendor: update c/common
  * cmd: check for user UID instead of privileges
  * run,build: conflict --isolation=chroot and --network
  * Fix broken dns test (from merge collision)
  * Fix stutters
  * Fix broken command completion
  * buildah bud --network=none should have no network
  * build: support --skip-unused-stages for multi-stage builds
  * Prevent use of --dns* options with --net=none
  * buildah: make --cache-ttl=0s equivalent to --no-cache
  * parse: make processing flags in --mount order agnostic
  * Minor test fix for podman-remote
  * build: honor &lt;Containerfile&gt;.containerignore as ignore file
  * Update install.md: Debian 11 (Bullseye) is stable
  * build(deps): bump github.com/docker/docker
  * Use constants from containers/common for finding seccomp.json
  * Don't call os.Exit(1) from manifest exist
  * manifest: add support for buildah manifest exists
  * Buildah should ignore /etc/crio/seccomp.json
  * chroot: Fix cross build break
  * chroot: Move isDevNull to run_common.go
  * chroot: Fix setRlimit build on FreeBSD
  * chroot: Move parseRLimits and setRlimits to run_common.go
  * chroot: Fix runUsingChrootExecMain on FreeBSD
  * chroot: Move runUsingChrootExecMain to run_common.go
  * chroot: Factor out Linux-specific unshare options from runUsingChroot
  * chroot: Move runUsingChroot to run_common.go
  * chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go
  * chroot: Factor out /dev/ptmx pty implementation
  * chroot: Add FreeBSD support for run with chroot isolation
  * build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
  * Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause
  * build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1
  * Cirrus: use image with fewer downloaded dependencies
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4
  * run: add container gid to additional groups (CVE-2022-2990 / bsc#1202812)
  * buildah: support for --retry and --retry-delay for push/pull failures
  * Makefile: always call $(GO) instead of `go`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3
  * test: use `T.TempDir` to create temporary test directory
  * mount,cache: enable SElinux shared content label option by default
  * commit: use race-free RemoveNames instead of SetNames
  * Drop util/util.Cause()
  * cmd/buildah: add "manifest create --amend"
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2
  * docs: specify git protocol is not supported for github hosted repo
  * Scrub user and group names from layer diffs
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8
  * version: bump to 1.28.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 1.28.1:
  * version: bump to v1.28.1
  * copier.Put(): clear up os/syscall mode bit confusion
  * retrofit, test: ubi8 changed architecture string
- Only build targets that we install</changelog>
  <changelog author="dcermak@suse.com" date="1669636800">- Update to version 1.28.2:
  * version: bump to 1.28.2
  * Stop using ubi8
  * Define and use a safe, reliable test image</changelog>
</package>
<package pkgid="43f078d923dcc90a4ef86f47c7e96cfb345ee9d82debdf587fa383a2830ce697" name="buildah" arch="ppc64le">
  <version epoch="0" ver="1.28.2" rel="150400.3.11.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
  <changelog author="dcermak@suse.com" date="1663761600">- Update to version 1.27.2:
  * tag v1.27.2
  * Fix broken command completion
  * build: support --skip-unused-stages for multi-stage builds</changelog>
  <changelog author="dcermak@suse.com" date="1665144000">- Update to version 1.28.0:
  * Bump to v1.28.0
  * No longer modify buildah.spec
  * Update for https://github.com/klauspost/pgzip/pull/50
  * Update vendor containers/(common,image)
  * [CI:DOCS] Add quay-description update reminder
  * vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
  * build(deps): bump github.com/opencontainers/selinux
  * Vendor in latest containers/storage
  * Changing shell list operators from `;` to `&amp;&amp;`
  * Fix buildahimage container.conf permissions regression
  * Set sysctls from containers.conf
  * refactor: stop using Normalize directly from containerd package
  * config,builder: process variant while populating image spec
  * Proof of concept: nightly dependency treadmill
  * Run codespell on code
  * Check for unset build args after TARGET args
  * pkg/cli: improve completion test
  * vendor in latest containers/(common,storage,image)
  * copier: work around freebsd bug for "mkdir /"
  * vendor: update c/image
  * test: run in the host cgroup namespace
  * vendor: update c/storage
  * vendor: update c/common
  * cmd: check for user UID instead of privileges
  * run,build: conflict --isolation=chroot and --network
  * Fix broken dns test (from merge collision)
  * Fix stutters
  * Fix broken command completion
  * buildah bud --network=none should have no network
  * build: support --skip-unused-stages for multi-stage builds
  * Prevent use of --dns* options with --net=none
  * buildah: make --cache-ttl=0s equivalent to --no-cache
  * parse: make processing flags in --mount order agnostic
  * Minor test fix for podman-remote
  * build: honor &lt;Containerfile&gt;.containerignore as ignore file
  * Update install.md: Debian 11 (Bullseye) is stable
  * build(deps): bump github.com/docker/docker
  * Use constants from containers/common for finding seccomp.json
  * Don't call os.Exit(1) from manifest exist
  * manifest: add support for buildah manifest exists
  * Buildah should ignore /etc/crio/seccomp.json
  * chroot: Fix cross build break
  * chroot: Move isDevNull to run_common.go
  * chroot: Fix setRlimit build on FreeBSD
  * chroot: Move parseRLimits and setRlimits to run_common.go
  * chroot: Fix runUsingChrootExecMain on FreeBSD
  * chroot: Move runUsingChrootExecMain to run_common.go
  * chroot: Factor out Linux-specific unshare options from runUsingChroot
  * chroot: Move runUsingChroot to run_common.go
  * chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go
  * chroot: Factor out /dev/ptmx pty implementation
  * chroot: Add FreeBSD support for run with chroot isolation
  * build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
  * Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause
  * build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1
  * Cirrus: use image with fewer downloaded dependencies
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4
  * run: add container gid to additional groups (CVE-2022-2990 / bsc#1202812)
  * buildah: support for --retry and --retry-delay for push/pull failures
  * Makefile: always call $(GO) instead of `go`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3
  * test: use `T.TempDir` to create temporary test directory
  * mount,cache: enable SElinux shared content label option by default
  * commit: use race-free RemoveNames instead of SetNames
  * Drop util/util.Cause()
  * cmd/buildah: add "manifest create --amend"
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2
  * docs: specify git protocol is not supported for github hosted repo
  * Scrub user and group names from layer diffs
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8
  * version: bump to 1.28.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 1.28.1:
  * version: bump to v1.28.1
  * copier.Put(): clear up os/syscall mode bit confusion
  * retrofit, test: ubi8 changed architecture string
- Only build targets that we install</changelog>
  <changelog author="dcermak@suse.com" date="1669636800">- Update to version 1.28.2:
  * version: bump to 1.28.2
  * Stop using ubi8
  * Define and use a safe, reliable test image</changelog>
</package>
<package pkgid="eaff244582d63f828d64fb526a9f5ad5c6b4392c30ce9316654fb15251c3ef47" name="buildah" arch="s390x">
  <version epoch="0" ver="1.28.2" rel="150400.3.11.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
  <changelog author="dcermak@suse.com" date="1663761600">- Update to version 1.27.2:
  * tag v1.27.2
  * Fix broken command completion
  * build: support --skip-unused-stages for multi-stage builds</changelog>
  <changelog author="dcermak@suse.com" date="1665144000">- Update to version 1.28.0:
  * Bump to v1.28.0
  * No longer modify buildah.spec
  * Update for https://github.com/klauspost/pgzip/pull/50
  * Update vendor containers/(common,image)
  * [CI:DOCS] Add quay-description update reminder
  * vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
  * build(deps): bump github.com/opencontainers/selinux
  * Vendor in latest containers/storage
  * Changing shell list operators from `;` to `&amp;&amp;`
  * Fix buildahimage container.conf permissions regression
  * Set sysctls from containers.conf
  * refactor: stop using Normalize directly from containerd package
  * config,builder: process variant while populating image spec
  * Proof of concept: nightly dependency treadmill
  * Run codespell on code
  * Check for unset build args after TARGET args
  * pkg/cli: improve completion test
  * vendor in latest containers/(common,storage,image)
  * copier: work around freebsd bug for "mkdir /"
  * vendor: update c/image
  * test: run in the host cgroup namespace
  * vendor: update c/storage
  * vendor: update c/common
  * cmd: check for user UID instead of privileges
  * run,build: conflict --isolation=chroot and --network
  * Fix broken dns test (from merge collision)
  * Fix stutters
  * Fix broken command completion
  * buildah bud --network=none should have no network
  * build: support --skip-unused-stages for multi-stage builds
  * Prevent use of --dns* options with --net=none
  * buildah: make --cache-ttl=0s equivalent to --no-cache
  * parse: make processing flags in --mount order agnostic
  * Minor test fix for podman-remote
  * build: honor &lt;Containerfile&gt;.containerignore as ignore file
  * Update install.md: Debian 11 (Bullseye) is stable
  * build(deps): bump github.com/docker/docker
  * Use constants from containers/common for finding seccomp.json
  * Don't call os.Exit(1) from manifest exist
  * manifest: add support for buildah manifest exists
  * Buildah should ignore /etc/crio/seccomp.json
  * chroot: Fix cross build break
  * chroot: Move isDevNull to run_common.go
  * chroot: Fix setRlimit build on FreeBSD
  * chroot: Move parseRLimits and setRlimits to run_common.go
  * chroot: Fix runUsingChrootExecMain on FreeBSD
  * chroot: Move runUsingChrootExecMain to run_common.go
  * chroot: Factor out Linux-specific unshare options from runUsingChroot
  * chroot: Move runUsingChroot to run_common.go
  * chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go
  * chroot: Factor out /dev/ptmx pty implementation
  * chroot: Add FreeBSD support for run with chroot isolation
  * build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
  * Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause
  * build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1
  * Cirrus: use image with fewer downloaded dependencies
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4
  * run: add container gid to additional groups (CVE-2022-2990 / bsc#1202812)
  * buildah: support for --retry and --retry-delay for push/pull failures
  * Makefile: always call $(GO) instead of `go`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3
  * test: use `T.TempDir` to create temporary test directory
  * mount,cache: enable SElinux shared content label option by default
  * commit: use race-free RemoveNames instead of SetNames
  * Drop util/util.Cause()
  * cmd/buildah: add "manifest create --amend"
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2
  * docs: specify git protocol is not supported for github hosted repo
  * Scrub user and group names from layer diffs
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8
  * version: bump to 1.28.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 1.28.1:
  * version: bump to v1.28.1
  * copier.Put(): clear up os/syscall mode bit confusion
  * retrofit, test: ubi8 changed architecture string
- Only build targets that we install</changelog>
  <changelog author="dcermak@suse.com" date="1669636800">- Update to version 1.28.2:
  * version: bump to 1.28.2
  * Stop using ubi8
  * Define and use a safe, reliable test image</changelog>
</package>
<package pkgid="eaa66036628db2ce1cfb0ff41001f52283771220c5722615e9c6eaef1f004230" name="buildah" arch="src">
  <version epoch="0" ver="1.28.2" rel="150400.3.11.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
  <changelog author="dcermak@suse.com" date="1663761600">- Update to version 1.27.2:
  * tag v1.27.2
  * Fix broken command completion
  * build: support --skip-unused-stages for multi-stage builds</changelog>
  <changelog author="dcermak@suse.com" date="1665144000">- Update to version 1.28.0:
  * Bump to v1.28.0
  * No longer modify buildah.spec
  * Update for https://github.com/klauspost/pgzip/pull/50
  * Update vendor containers/(common,image)
  * [CI:DOCS] Add quay-description update reminder
  * vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
  * build(deps): bump github.com/opencontainers/selinux
  * Vendor in latest containers/storage
  * Changing shell list operators from `;` to `&amp;&amp;`
  * Fix buildahimage container.conf permissions regression
  * Set sysctls from containers.conf
  * refactor: stop using Normalize directly from containerd package
  * config,builder: process variant while populating image spec
  * Proof of concept: nightly dependency treadmill
  * Run codespell on code
  * Check for unset build args after TARGET args
  * pkg/cli: improve completion test
  * vendor in latest containers/(common,storage,image)
  * copier: work around freebsd bug for "mkdir /"
  * vendor: update c/image
  * test: run in the host cgroup namespace
  * vendor: update c/storage
  * vendor: update c/common
  * cmd: check for user UID instead of privileges
  * run,build: conflict --isolation=chroot and --network
  * Fix broken dns test (from merge collision)
  * Fix stutters
  * Fix broken command completion
  * buildah bud --network=none should have no network
  * build: support --skip-unused-stages for multi-stage builds
  * Prevent use of --dns* options with --net=none
  * buildah: make --cache-ttl=0s equivalent to --no-cache
  * parse: make processing flags in --mount order agnostic
  * Minor test fix for podman-remote
  * build: honor &lt;Containerfile&gt;.containerignore as ignore file
  * Update install.md: Debian 11 (Bullseye) is stable
  * build(deps): bump github.com/docker/docker
  * Use constants from containers/common for finding seccomp.json
  * Don't call os.Exit(1) from manifest exist
  * manifest: add support for buildah manifest exists
  * Buildah should ignore /etc/crio/seccomp.json
  * chroot: Fix cross build break
  * chroot: Move isDevNull to run_common.go
  * chroot: Fix setRlimit build on FreeBSD
  * chroot: Move parseRLimits and setRlimits to run_common.go
  * chroot: Fix runUsingChrootExecMain on FreeBSD
  * chroot: Move runUsingChrootExecMain to run_common.go
  * chroot: Factor out Linux-specific unshare options from runUsingChroot
  * chroot: Move runUsingChroot to run_common.go
  * chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go
  * chroot: Factor out /dev/ptmx pty implementation
  * chroot: Add FreeBSD support for run with chroot isolation
  * build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
  * Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause
  * build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1
  * Cirrus: use image with fewer downloaded dependencies
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4
  * run: add container gid to additional groups (CVE-2022-2990 / bsc#1202812)
  * buildah: support for --retry and --retry-delay for push/pull failures
  * Makefile: always call $(GO) instead of `go`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3
  * test: use `T.TempDir` to create temporary test directory
  * mount,cache: enable SElinux shared content label option by default
  * commit: use race-free RemoveNames instead of SetNames
  * Drop util/util.Cause()
  * cmd/buildah: add "manifest create --amend"
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2
  * docs: specify git protocol is not supported for github hosted repo
  * Scrub user and group names from layer diffs
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8
  * version: bump to 1.28.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 1.28.1:
  * version: bump to v1.28.1
  * copier.Put(): clear up os/syscall mode bit confusion
  * retrofit, test: ubi8 changed architecture string
- Only build targets that we install</changelog>
  <changelog author="dcermak@suse.com" date="1669636800">- Update to version 1.28.2:
  * version: bump to 1.28.2
  * Stop using ubi8
  * Define and use a safe, reliable test image</changelog>
</package>
<package pkgid="d8b6efa552e30b3735e49165bff65bfd331877cb3a2219826ad9e2539b0b4346" name="buildah" arch="x86_64">
  <version epoch="0" ver="1.28.2" rel="150400.3.11.1"/>
  <changelog author="alexandre.vicenzi@suse.com" date="1630584000">- Update to version 1.22.3:
  * Update dependencies
  * Post-branch commit
  * Accept repositories on login/logout</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1631880000">- Update to version 1.23.0:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Update to version 1.23.1:
  * Update dependencies
  * Bugfixes</changelog>
  <changelog author="dcermak@suse.com" date="1637841600">- Sync package with Factory (bsc#1192999)
- remove no longer used CVE-2019-10214.patch</changelog>
  <changelog author="dcermak@suse.com" date="1643284800">- Update to version 1.24.0:
  * Bump to v1.24.0
  * Update vendor of containers/common
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Github-workflow: Report both failures and errors.
  * build(deps): bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
  * Update docs/buildah-build.1.md
  * [CI:DOCS] Fix typos and improve language
  * buildah bud --network add support for custom networks
  * Make pull commands be consistent
  * docs/buildah-build.1.md: don't imply that -v isn't just a RUN thing
  * build(deps): bump github.com/onsi/gomega from 1.17.0 to 1.18.0
  * Vendor in latest containers/image
  * Run codespell on code
  * .github/dependabot.yml: add tests/tools go.mod
  * CI: rm git-validation, add GHA job to validate PRs
  * tests/tools: bump go-md2man to v2.0.1
  * tests/tools/Makefile: simplify
  * tests/tools: bump onsi/ginkgo to v1.16.5
  * vendor: bump c/common and others
  * mount: add support for custom upper and workdir with overlay mounts
  * linux: fix lookup for runtime
  * overlay: add MountWithOptions to API which extends support for advanced overlay
  * Allow processing of SystemContext from FlagSet
  * .golangci.yml: enable unparam linter
  * util/resolveName: rm bool return
  * tests/tools: bump golangci-lint
  * .gitignore: fixups
  * all: fix capabilities.NewPid deprecation warnings
  * bind/mount.go: fix linter comment
  * all: fix gosimple warning S1039
  * tests/e2e/buildah_suite_test.go: fix gosimple warnings
  * imagebuildah/executor.go: fix gosimple warning
  * util.go: fix gosimple warning
  * build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0
  * Enable git-daemon tests
  * Allow processing of id options from FlagSet
  * Cirrus: Re-order tasks for more parallelism
  * Cirrus: Freshen VM images
  * Fix platform handling for empty os/arch values
  * Allow processing of network options from FlagSet
  * Fix permissions on  secrets directory
  * Update containers/image and containers/common
  * bud.bats: use a local git daemon for the git protocol test
  * Allow processing of common options from FlagSet
  * Cirrus: Run int. tests in parallel with unit
  * vendor c/common
  * Fix default CNI paths
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.6 to 1.7.7
  * multi-stage: enable mounting stages across each other with selinux enabled
  * executor: Share selinux label of first stage with other stages in a build
  * buildkit: add from field to bind and cache mounts so images can be used as source
  * Use config.ProxyEnv from containers/common
  * use libnetwork from c/common for networking
  * setup the netns in the buildah parent process
  * build(deps): bump github.com/containerd/containerd from 1.5.8 to 1.5.9
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.4 to 1.7.6
  * build: fix libsubid test
  * Allow callers to replace the ContainerSuffix
  * parse: allow parsing anomaly non-human value for memory control group
  * .cirrus: remove static_build from ci
  * stage_executor: re-use all possible layers from cache for squashed builds
  * build(deps): bump github.com/spf13/cobra from 1.2.1 to 1.3.0
  * Allow rootless buildah to set resource limits on cgroup V2
  * build(deps): bump github.com/docker/docker
  * tests: move buildkit mount tests files from TESTSDIR to TESTDIR before modification
  * build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3
  * Wire logger through to config
  * copier.Put: check for is-not-a-directory using lstat, not stat
  * Turn on rootless cgroupv2 tests
  * Grab all of the containers.conf settings for namespaces.
  * image: set MediaType in OCI manifests
  * copier: RemoveAll possibly-directories
  * Simple README fix
  * images: accept multiple filter with logical AND
  * build(deps): bump github.com/containernetworking/cni from 0.8.1 to 1.0.1
  * UPdate vendor of container/storage
  * build(deps): bump github.com/onsi/gomega from 1.16.0 to 1.17.0
  * build(deps): bump github.com/containers/image/v5 from 5.16.1 to 5.17.0
  * Make LocalIP public function so Podman can use it
  * Fix UnsetEnv for buildah bud
  * Tests should rely only on static/unchanging images
  * run: ensure that stdio pipes are labeled correctly
  * build(deps): bump github.com/docker/docker
  * Cirrus: Bump up to Fedora 35 &amp; Ubuntu 21.10
  * chroot: don't use the generate default seccomp filter for unit tests
  * build(deps): bump github.com/containerd/containerd from 1.5.7 to 1.5.8
  * ssh-agent: Increase timeout before we explicitly close connection
  * docs/tutorials: update
  * Clarify that manifest defaults to localhost as the registry name
  * "config": remove a stray bit of debug output
  * "commit": fix a flag typo
  * Fix an error message: unlocking vs locking
  * Expand the godoc for CommonBuildOptions.Secrets
  * chroot: accept an "rw" option
  * Add --unsetenv option to buildah commit and build
  * define.TempDirForURL(): show CombinedOutput when a command fails
  * config: support the variant field
  * rootless: do not bind mount /sys if not needed
  * Fix tutorial to specify command on buildah run line
  * build: history should not contain ARG values
  * docs: Use guaranteed path for go-md2man
  * run: honor --network=none from builder if nothing specified
  * networkpolicy: Should be enabled instead of default when explictly set
  * Add support for env var secret sources
  * build(deps): bump github.com/docker/docker
  * fix: another non-portable shebang
  * Rootless containers users should use additional groups
  * Support overlayfs path contains colon
  * Report ignorefile location when no content added
  * Add support for host.containers.internal in the /etc/hosts
  * build(deps): bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5
  * imagebuildah: fix nil deref
  * buildkit: add support for mount=type=cache
  * Default secret mode to 400
  * [CI:DOCS] Include manifest example usage
  * docs: update buildah-from, buildah-pull 'platform' option compatibility notes
  * docs: update buildah-build 'platform' option compatibility notes
  * De-dockerize the man page as much as possible
  * [CI:DOCS] Touch up Containerfile man page to show ARG can be 1st
  * docs: Fix and Update Containerfile man page with supported mount types
  * mount: add tmpcopyup to tmpfs mount option
  * buildkit: Add support for --mount=type=tmpfs
  * build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
  * Fix command doc links in README.md
  * build(deps): bump github.com/containers/image/v5 from 5.16.0 to 5.16.1
  * build: Add support for buildkit like --mount=type=bind
  * Bump containerd to v1.5.7
  * build(deps): bump github.com/docker/docker
  * tests: stop pulling php, composer
  * Fix .containerignore link file
  * Cirrus: Fix defunct package metadata breaking cache
  * build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
  * buildah build: add --all-platforms
  * Add man page for Containerfile and .containerignore
  * Plumb the remote logger throughut Buildah
  * Replace fmt.Sprintf("%d", x) with strconv.Itoa(x)
  * Run: Cleanup run directory after every RUN step
  * build(deps): bump github.com/containers/common from 0.45.0 to 0.46.0
  * Makefile: adjust -ldflags/-gcflags/-gccgoflags depending on the go implementation
  * Makefile: check for `-race` using `-mod=vendor`
  * imagebuildah: fix an attempt to write to a nil map
  * push: support to specify the compression format
  * conformance: allow test cases to specify dockerUseBuildKit
  * build(deps): bump github.com/containers/common from 0.44.1 to 0.45.0
  * build(deps): bump github.com/containers/common from 0.44.0 to 0.44.1
  * unmarshalConvertedConfig(): handle zstd compression
  * tests/copy/copy: wire up compression options
  * Update to github.com/vbauerster/mpb v7.1.5
  * Add flouthoc to OWNERS
  * build: Add additional step nodes when labels are modified
  * Makefile: turn on race detection whenever it's available
  * conformance: add more tests for exclusion short-circuiting
  * Update VM Images + Drop prior-ubuntu testing
  * Bump to v1.24.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1643976000">- Update to version 1.24.1:
  * overlay: always honor mountProgram by @giuseppe in https://github.com/containers/buildah/pull/3750
  * build(deps): bump github.com/onsi/gomega from 1.18.0 to 1.18.1 by @dependabot in https://github.com/containers/buildah/pull/3754
  * imagebuildah.BuildDockerfiles(): create the jobs semaphore by @nalind in https://github.com/containers/buildah/pull/3753
  * build(deps): bump github.com/containers/storage from 1.38.1 to 1.38.2 by @dependabot in https://github.com/containers/buildah/pull/3760
  * System tests: fix accidental vandalism of source dir by @edsantiago in https://github.com/containers/buildah/pull/3761
  * Update vendor of containers/storage and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3759
  * Bump version of containers/image and containers/common by @rhatdan in https://github.com/containers/buildah/pull/3764
  * Update vendor of openshift/imagebuilder by @rhatdan in https://github.com/containers/buildah/pull/3765
  * caps: fix buildah run --cap-add=all by @rhatdan in https://github.com/containers/buildah/pull/3766
  * stage_executor: Add support for inline `FROM --platform=` within Containerfile/Dockerfile by @flouthoc in https://github.com/containers/buildah/pull/3757
  * *Full Changelog**: https://github.com/containers/buildah/compare/v1.24.0...v1.24.1</changelog>
  <changelog author="dcermak@suse.com" date="1645099200">- Update to version 1.24.2:
  * Bump to v1.24.2
  * Increase subuid/subgid to 65535
  * history: only add proxy vars to history if specified
  * run_linux: use --systemd-cgroup
  * buildah: new global option --cgroup-manager
  * Makefile: build with systemd when available
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
  * Bump c/common to v0.47.4
  * Cirrus: Use updated VM images
  * conformance: add a few "replace-directory-with-symlink" tests
  * Bump back to v1.25.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1648641600">- fixes bsc#1197870
- Update to version 1.25.0:
  * Bump to v1.25.0
  * install: drop RHEL/CentOS 7 doc
  * build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
  * Bump c/storage to v1.39.0 in main
  * Add a test for CVE-2022-27651
  * build(deps): bump github.com/docker/docker
  * Bump github.com/prometheus/client_golang to v1.11.1
  * [CI:DOCS] man pages: sort flags, and keep them that way
  * build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
  * Don't pollute
  * network setup: increase timeout to 4 minutes
  * do not set the inheritable capabilities
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
  * parse: convert exposed GetVolumes to internal only
  * buildkit: mount=type=cache support locking external cache store
  * .in support: improve error message when cpp is not installed
  * buildah image: install cpp
  * build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
  * build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
  * build(deps): bump github.com/docker/docker
  * Add --no-hosts flag to eliminate use of /etc/hosts within containers
  * test: remove skips for rootless users
  * test: unshare mount/umount if test is_rootless
  * tests/copy: read correct containers.conf
  * build(deps): bump github.com/docker/distribution
  * cirrus: add seperate task and matrix for rootless
  * tests: skip tests for rootless which need unshare
  * buildah: test rootless integration
  * vendor: bump c/storage to main/93ce26691863
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
  * tests/copy: initialize the network, too
  * [CI:DOCS] remove references to Kubic for CentOS and Ubuntu
  * build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
  * use c/image/pkg/blobcache
  * vendor c/image/v5@v5.20.0
  * add: ensure the context directory is an absolute path
  * executor: docker builds must inherit healthconfig from base if any
  * docs: Remove Containerfile and containeringore
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
  * helpers.bash: Use correct syntax
  * speed up combination-namespaces test
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Bump back to 1.25.0-dev
  * build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0</changelog>
  <changelog author="dcermak@suse.com" date="1648728000">- remove obsolete check for TW, SLE 15 &amp; Leap 15
- add workaround for https://bugzilla.opensuse.org/show_bug.cgi?id=1183043
- Update to version 1.25.1:
  * Bump to v1.25.1
  * buildah: create WORKDIR with USER permissions
  * vendor: update github.com/openshift/imagebuilder
  * copier: attempt to open the dir before adding it
  * Updated dependabot to get updates for GitHub actions.
  * Switch most calls to filepath.Walk to filepath.WalkDir
  * build: allow --no-cache and --layers so build cache can be overrided
  * build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
  * Bump to v1.26.0-dev
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools</changelog>
  <changelog author="dcermak@suse.com" date="1651752000">- Update to version 1.26.1:
  * Bump to v1.26.1
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.26.0
  * build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
  * imagebuildah,build: move deepcopy of args before we spawn goroutine
  * Vendor in containers/storage v1.40.2
  * buildah.BuilderOptions.DefaultEnv is ignored, so mark it as deprecated
  * help output: get more consistent about option usage text
  * Handle OS version and features flags
  * buildah build: --annotation and --label should remove values
  * buildah build: add a --env
  * buildah: deep copy options.Args before performing concurrent build/stage
  * test: inline platform and builtinargs behaviour
  * vendor: bump imagebuilder to master/009dbc6
  * build: automatically set correct TARGETPLATFORM where expected
  * build(deps): bump github.com/fsouza/go-dockerclient
  * Vendor in containers/(common, storage, image)
  * imagebuildah, executor: process arg variables while populating baseMap
  * buildkit: add support for custom build output with --output
  * Cirrus: Update CI VMs to F36
  * fix staticcheck linter warning for deprecated function
  * Fix docs build on FreeBSD
  * build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
  * copier.unwrapError(): update for Go 1.16
  * copier.PutOptions: add StripSetuidBit/StripSetgidBit/StripStickyBit
  * copier.Put(): write to read-only directories
  * build(deps): bump github.com/cpuguy83/go-md2man/v2 in /tests/tools
  * Rename $TESTSDIR (the plural one), step 4 of 3
  * Rename $TESTSDIR (the plural one), step 3 of 3
  * Rename $TESTSDIR (the plural one), step 2 of 3
  * Rename $TESTSDIR (the plural one), step 1 of 3
  * build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
  * Ed's periodic test cleanup
  * using consistent lowercase 'invalid' word in returned err msg
  * Update vendor of containers/(common,storage,image)
  * use etchosts package from c/common
  * run: set actual hostname in /etc/hostname to match docker parity
  * update c/common to latest main
  * Update vendor of containers/(common,storage,image)
  * Stop littering
  * manifest-create: allow creating manifest list from local image
  * Update vendor of storage,common,image
  * Bump golang.org/x/crypto to 7b82a4e
  * Initialize network backend before first pull
  * oci spec: change special mount points for namespaces
  * tests/helpers.bash: assert handle corner cases correctly
  * buildah: actually use containers.conf settings
  * integration tests: learn to start a dummy registry
  * Fix error check to work on Podman
  * buildah build should accept at most one arg
  * tests: reduce concurrency for flaky bud-multiple-platform-no-run
  * vendor in latest containers/common,image,storage
  * manifest-add: allow override arch,variant while adding image
  * Remove a stray `\` from .containerenv
  * Vendor in latest opencontainers/selinux v1.10.1
  * build, commit: allow removing default identity labels
  * Create shorter names for containers based on image IDs
  * test: skip rootless on cgroupv2 in root env
  * fix hang when oci runtime fails
  * Set permissions for GitHub actions
  * copier test: use correct UID/GID in test archives
  * run: set parent-death signals and forward SIGHUP/SIGINT/SIGTERM
  * Bump back to v1.26.0-dev
  * build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
  * Included the URL to check the SHA</changelog>
  <changelog author="dcermak@suse.com" date="1657195200">- Update to version 1.26.2:
  * Bump to v1.26.2
  * Bump github.com/containers/storage from v1.40.2 to v1.40.3
  * buildah: add support for renaming a device in rootless setups</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Update to version 1.26.3:
  * release: bump to v1.26.3
  * define.downloadToDirectory: fail early if bad HTTP response
  * add: fail on bad http response instead of writing to container
  * squash: never use build cache when computing last step of last stage
  * run: allow resuing secret twice in different RUN steps
  * integration tests: update expected error messages
  * integration tests: quote "?" in shell scripts
  * Use errors.Is() to check for storage errors
  * lint: inspectable is never nil
  * chroot: use ActKillThread instead of ActKill
  * chroot: honor DefaultErrnoRet
  * Bump dependencies
  * Set user namespace defaults correctly for the library
  * contrib/rpm/buildah.spec: fix `rpm` parser warnings
- Drop requires on apparmor pattern, should be moved elsewhere
  for systems which want AppArmor instead of SELinux.
- Drop binutils-gold workaround, no longer needed.
- Update BuildRequires to libassuan-devel &gt;= 2.5.2, pkgconfig file
  is required to build.</changelog>
  <changelog author="dcermak@suse.com" date="1659614400">- Update to version 1.26.4:
  * tag v1.26.4
  * build, multiarch: support splitting build logs for --platform
  * copier: add `NoOverwriteNonDirDir` option
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * buildkit: supports additionalBuildContext in builds via --build-context
  * Add --cpp-flag flag to buildah build</changelog>
  <changelog author="dcermak@suse.com" date="1660046400">- Update to version 1.27.0:
  * release: tag v1.27.0
  * make,cross: ignore loong64 from target list
  * Allow chflags operations inside the container
  * Don't try to call runLabelStdioPipes if spec.Linux is not set
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: support filtering cache by duration using --cache-ttl
  * build: support building from commit when using git repo as build context
  * build: clean up git repos correctly when using subdirs
  * integration tests: quote "?" in shell scripts
  * Fix a copy/paste error
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * vendor c/common@v0.49.1
  * test: manifest inspect should have OCIv1 annotation
  * vendor: bump to c/common@87fab4b7019a
  * Failure to determine a file or directory should print an error
  * build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
  * refactor: remove unused CommitOptions from generateBuildOutput
  * stage_executor: generate output for cases with no commit
  * stage_executor, commit: output only if last stage in build
  * Use errors.Is() instead of os.Is{Not,}Exist
  * Minor test tweak for podman-remote compatibility
  * Cirrus: Use the latest imgts container
  * imagebuildah: complain about the right Dockerfile
  * tests: don't try to wrap `nil` errors
  * cmd/buildah.commitCmd: don't shadow "err"
  * cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
  * Fix a copy/paste error message
  * Fix a typo in an error message
  * build,cache: support pulling/pushing cache layers to/from remote sources
  * Update vendor of containers/(common, storage, image)
  * Rename chroot/run.go to chroot/run_linux.go
  * Don't bother telling codespell to skip files that don't exist
  * Set user namespace defaults correctly for the library
  * imagebuildah: optimize cache hits for COPY and ADD instructions
  * Cirrus: Update VM images w/ updated bats
  * build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
  * docs, run: show SELinux label flag for cache and bind mounts
  * build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
  * imagebuildah, build: remove undefined concurrent writes
  * bump github.com/opencontainers/runtime-tools
  * Add FreeBSD support for 'buildah info'
  * Vendor in latest containers/(storage, common, image)
  * Add freebsd cross build targets
  * Make the jail package build on 32bit platforms
  * Cirrus: Ensure the build-push VM image is labeled
  * GHA: Fix dynamic script filename
  * Vendor in containers/(common, storage, image)
  * Run codespell
  * Remove import of github.com/pkg/errors
  * Avoid using cgo in pkg/jail
  * Rename footypes to fooTypes for naming consistency
  * Move cleanupTempVolumes and cleanupRunMounts to run_common.go
  * Make the various run mounts work for FreeBSD
  * Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
  * Move runSetupRunMounts to run_common.go
  * Move cleanableDestinationListFromMounts to run_common.go
  * Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
  * Move setupMounts and runSetupBuiltinVolumes to run_common.go
  * Tidy up - runMakeStdioPipe can't be shared with linux
  * Move runAcceptTerminal to run_common.go
  * Move stdio copying utilities to run_common.go
  * Move runUsingRuntime and runCollectOutput to run_common.go
  * Move fileCloser, waitForSync and contains to run_common.go
  * Move checkAndOverrideIsolationOptions to run_common.go
  * Move DefaultNamespaceOptions to run_common.go
  * Move getNetworkInterface to run_common.go
  * Move configureEnvironment to run_common.go
  * Don't crash in configureUIDGID if Process.Capabilities is nil
  * Move configureUIDGID to run_common.go
  * Move runLookupPath to run_common.go
  * Move setupTerminal to run_common.go
  * Move etc file generation utilities to run_common.go
  * Add run support for FreeBSD
  * Add a simple FreeBSD jail library
  * Add FreeBSD support to pkg/chrootuser
  * Sync call signature for RunUsingChroot with chroot/run.go
  * test: verify feature to resolve basename with args
  * vendor: bump openshift/imagebuilder to master@4151e43
  * GHA: Remove required reserved-name use
  * buildah: set XDG_RUNTIME_DIR before setting default runroot
  * imagebuildah: honor build output even if build container is not commited
  * chroot: honor DefaultErrnoRet
  * [CI:DOCS] improve pull-policy documentation
  * tests: retrofit test since --file does not supports dir
  * Switch to golang native error wrapping
  * BuildDockerfiles: error out if path to containerfile is a directory
  * define.downloadToDirectory: fail early if bad HTTP response
  * GHA: Allow re-use of Cirrus-Cron fail-mail workflow
  * add: fail on bad http response instead of writing to container
  * build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
  * [CI:DOCS] Update buildahimage comment
  * lint: inspectable is never nil
  * vendor: c/common to common@7e1563b
  * build: support OCI hooks for ephemeral build containers
  * [CI:BUILD] Install latest buildah instead of compiling
  * Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
  * build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
  * Make sure cpp is installed in buildah images
  * demo: use unshare for rootless invocations
  * buildah.spec.rpkg: initial addition
  * build: fix test for subid 4
  * build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
  * build, userns: add support for --userns=auto
  * Fix building upstream buildah image
  * Remove redundant buildahimages-are-sane validation
  * Docs: Update multi-arch buildah images readme
  * Cirrus: Migrate multiarch build off github actions
  * retrofit-tests: we skip unused stages so use stages
  * stage_executor: dont rely on stage while looking for additional-context
  * buildkit, multistage: skip computing unwanted stages
  * More test cleanup
  * copier: work around freebsd bug for "mkdir /"
  * Replace $BUILDAH_BINARY with buildah() function
  * Fix up buildah images
  * Make util and copier build on FreeBSD
  * Vendor in latest github.com/sirupsen/logrus
  * build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
  * Makefile: allow building without .git
  * run_unix: don't return an error from getNetworkInterface
  * run_unix: return a valid DefaultNamespaceOptions
  * Update vendor of containers/storage
  * chroot: use ActKillThread instead of ActKill
  * use resolvconf package from c/common/libnetwork
  * update c/common to latest main
  * copier: add `NoOverwriteNonDirDir` option
  * Sort buildoptions and move cli/build functions to internal
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
  * build(deps): bump github.com/docker/docker
  * build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
  * build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
  * Fix TODO: de-spaghettify run mounts
  * Move options parsing out of build.go and into pkg/cli
  * [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
  * build, multiarch: support splitting build logs for --platform
  * build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
  * [CI:BUILD] WIP Cleanup Image Dockerfiles
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
  * cli remove stutter
  * docker-parity: ignore sanity check if baseImage history is null
  * build, commit: allow disabling image history with --omit-history
  * Fix use generic/ambiguous DEBUG name
  * build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
  * Cirrus: use Ubuntu 22.04 LTS
  * Fix codespell errors
  * Remove util.StringInSlice because it is defined in containers/common
  * buildah: add support for renaming a device in rootless setups
  * squash: never use build cache when computing last step of last stage
  * Update vendor of containers/(common, storage, image)
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * buildkit: supports additionalBuildContext in builds via --build-context
  * test cleanup
  * buildah source pull/push: show progress bar
  * run: allow resuing secret twice in different RUN steps
  * test helpers: default to being rootless-aware
  * Add --cpp-flag flag to buildah build
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * build: accept branch and subdirectory when context is git repo
  * build(deps): bump github.com/docker/docker
  * Vendor in latest containers/common
  * build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
  * vendor: update c/storage and c/image
  * build(deps): bump github.com/golangci/golangci-lint in /tests/tools
  * Fix gentoo install docs
  * build(deps): bump github.com/docker/docker
  * copier: move NSS load to new process
  * Add test for prevention of reusing encrypted layers
  * Make `buildah build --label foo` create an empty "foo" label again
  * Bump to v1.27.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1661515200">- Add fix for CVE-2022-2990 / bsc#1202812
  add: add-container-gid-to-additional-groups.patch</changelog>
  <changelog author="dcermak@suse.com" date="1662984000">- Update to version 1.27.1:
  * release: bump to v1.27.1
  * run: add container gid to additional groups
- Drop add-container-gid-to-additional-groups.patch
  (merged upstream)</changelog>
  <changelog author="dcermak@suse.com" date="1663761600">- Update to version 1.27.2:
  * tag v1.27.2
  * Fix broken command completion
  * build: support --skip-unused-stages for multi-stage builds</changelog>
  <changelog author="dcermak@suse.com" date="1665144000">- Update to version 1.28.0:
  * Bump to v1.28.0
  * No longer modify buildah.spec
  * Update for https://github.com/klauspost/pgzip/pull/50
  * Update vendor containers/(common,image)
  * [CI:DOCS] Add quay-description update reminder
  * vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
  * build(deps): bump github.com/opencontainers/selinux
  * Vendor in latest containers/storage
  * Changing shell list operators from `;` to `&amp;&amp;`
  * Fix buildahimage container.conf permissions regression
  * Set sysctls from containers.conf
  * refactor: stop using Normalize directly from containerd package
  * config,builder: process variant while populating image spec
  * Proof of concept: nightly dependency treadmill
  * Run codespell on code
  * Check for unset build args after TARGET args
  * pkg/cli: improve completion test
  * vendor in latest containers/(common,storage,image)
  * copier: work around freebsd bug for "mkdir /"
  * vendor: update c/image
  * test: run in the host cgroup namespace
  * vendor: update c/storage
  * vendor: update c/common
  * cmd: check for user UID instead of privileges
  * run,build: conflict --isolation=chroot and --network
  * Fix broken dns test (from merge collision)
  * Fix stutters
  * Fix broken command completion
  * buildah bud --network=none should have no network
  * build: support --skip-unused-stages for multi-stage builds
  * Prevent use of --dns* options with --net=none
  * buildah: make --cache-ttl=0s equivalent to --no-cache
  * parse: make processing flags in --mount order agnostic
  * Minor test fix for podman-remote
  * build: honor &lt;Containerfile&gt;.containerignore as ignore file
  * Update install.md: Debian 11 (Bullseye) is stable
  * build(deps): bump github.com/docker/docker
  * Use constants from containers/common for finding seccomp.json
  * Don't call os.Exit(1) from manifest exist
  * manifest: add support for buildah manifest exists
  * Buildah should ignore /etc/crio/seccomp.json
  * chroot: Fix cross build break
  * chroot: Move isDevNull to run_common.go
  * chroot: Fix setRlimit build on FreeBSD
  * chroot: Move parseRLimits and setRlimits to run_common.go
  * chroot: Fix runUsingChrootExecMain on FreeBSD
  * chroot: Move runUsingChrootExecMain to run_common.go
  * chroot: Factor out Linux-specific unshare options from runUsingChroot
  * chroot: Move runUsingChroot to run_common.go
  * chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go
  * chroot: Factor out /dev/ptmx pty implementation
  * chroot: Add FreeBSD support for run with chroot isolation
  * build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
  * Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause
  * build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1
  * Cirrus: use image with fewer downloaded dependencies
  * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4
  * run: add container gid to additional groups (CVE-2022-2990 / bsc#1202812)
  * buildah: support for --retry and --retry-delay for push/pull failures
  * Makefile: always call $(GO) instead of `go`
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3
  * test: use `T.TempDir` to create temporary test directory
  * mount,cache: enable SElinux shared content label option by default
  * commit: use race-free RemoveNames instead of SetNames
  * Drop util/util.Cause()
  * cmd/buildah: add "manifest create --amend"
  * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2
  * docs: specify git protocol is not supported for github hosted repo
  * Scrub user and group names from layer diffs
  * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8
  * version: bump to 1.28.0-dev</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 1.28.1:
  * version: bump to v1.28.1
  * copier.Put(): clear up os/syscall mode bit confusion
  * retrofit, test: ubi8 changed architecture string
- Only build targets that we install</changelog>
  <changelog author="dcermak@suse.com" date="1669636800">- Update to version 1.28.2:
  * version: bump to 1.28.2
  * Stop using ubi8
  * Define and use a safe, reliable test image</changelog>
</package>
<package pkgid="16908bdca2d24513e31740250c38be1964c7649b2df59aa5f7aa7d8baf77fde8" name="busybox" arch="aarch64">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="e0fe4c8b0fe6d8c7e2d3e9aa3bd620acc421c9cca8e423eb48782ec66bdf8f02" name="busybox" arch="ppc64le">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="9721bfb06294395f9d2fc10f47aa7f0055c32bcf27e50b58a13e435160be19a9" name="busybox" arch="s390x">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="e9bcf3a63566de42528f1208ed3afa1a82cfc2c84f34832b632a328f4e210945" name="busybox" arch="src">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="e79e1e0759af9e8fa8a37f085c183fb3d8ae2854b90348812c506b7acf13640c" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="1b589c934f15c07af6f630f6e9b04a1727fc021a486c63beda48e0a341047b37" name="busybox" arch="aarch64">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="fc4985b996009bac72a7b0ba1efcf7101a123837528d6c7432e7886c267774d5" name="busybox" arch="ppc64le">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="eb4c4576ffa1caad0a83a27e2013666017120cd3d4c270a816ff344a005e190f" name="busybox" arch="s390x">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="c2f1766e0c4fff377bde9380eb087136ee9d20a0457e6e8458bd4756f5d46088" name="busybox" arch="src">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="e11326f5bd0d880fee1ea372d6ba734bf8a39467d59d1f7fb745704f73acec10" name="busybox" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="16ba6c57494572d1519e0e8fe8da754087f57adc1167a3a84be924b15fa9303c" name="busybox-adduser" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="403273b7f26e5f65c979721809a4506cd63e82341ff31d927e6f9ce06c5df452" name="busybox-adduser" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="728c372842775d1727659fbf68c9bd6804e1f80f4a523e5b6d8d1661b1d38720" name="busybox-attr" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="0d8a7ec7e2233e9477b20bfd367fc6f6f0062edefe5bbb82370277701f70e846" name="busybox-attr" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="d488d8a26fd9ee511da07f7ec1fbe924d28dd144c36e3049a1823bddc9c21e66" name="busybox-bc" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="18986aab1aec0956006d61d9b920d6424d3b47646db3b7030b710cd3b7e623d0" name="busybox-bc" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="bb61ec10eb8339220051281b4a039151059c79e93ce08557615849f578add409" name="busybox-bind-utils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="82b81bafd165d9c9403bbad6fe29c6e2bf2855ba43dc9944d0d55f130599f751" name="busybox-bind-utils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="261d24414c3646718250b4ff35050cd0fcb7761516bce2ed637295598b4d51fd" name="busybox-bzip2" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="09ad51a3f8caee986aef414e4786f5743fa62b41545b2e726ac706d6e22bec7b" name="busybox-bzip2" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="3391c0d61c2da81c73487f1b1eadedc8d5a594ab259530e24d7ffd96044e6cc0" name="busybox-coreutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="3f9bbe44d890e2f1026512033030964b6566cd47cae9da4aca2b09264a02d91c" name="busybox-coreutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="4ade83dfb29eded5e86b91021baa9b747321ae585fd74b2e30170a8024e1a452" name="busybox-cpio" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="5c0a0bbd2c53204d3f4ff9208acd78d277f2f82a5bcf09dccf75c34e85f139a2" name="busybox-cpio" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="8a0ce92d3abde2847a6098d2a05c4e34410eb8f49bab213a2c5c110b5a57bb95" name="busybox-diffutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="9a253c884c4cb60c981d1b33b3133969934c712caee8fcb62e1abfcbdf4b1ff5" name="busybox-diffutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="8bdf122c96bddb81740668a084edf63fd53e14fba7be693ed2666c6373df2f5f" name="busybox-dos2unix" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="38d3210cf0c28fb9433ec83fae4d60d00897d2468bb1deda5e51bebd80344fdd" name="busybox-dos2unix" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="ad4d02032a23f3a7b4f57520793c0d91143ba67c95e3da7e3aaeffc7fb55803a" name="busybox-ed" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="e6cabf70a29372fa7f3f515f4103432193b374b9900bf6baf8d09323add2151f" name="busybox-ed" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b24850ddfbf057ffbc9a1880ac947b19e5bc4de66d64a9f50f4166dbf5edf5dc" name="busybox-findutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="d1cdf6c3038b5c248bb916d2c056ff3cbc0532fd62df93f335cc5040f0314045" name="busybox-findutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="8235846dd10ad3246ccc98bcc7236030804c6bb7feab4b579d77a09dd22a6c0c" name="busybox-gawk" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="6ae54c7ea4983d479fc58b0a45524ceefbb1c68a8c61419e205876ae63ac145a" name="busybox-gawk" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="c7fd60b91419bf4b0ded314f79cfb48c51f7aebb2139323c650d61462f618dcc" name="busybox-grep" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="35eb66186dbeb7fbe69c537a9bd1bef742c6c8c4ea1ae344405630a865b7f053" name="busybox-grep" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="80d4d8e73038f8a12f9933672cc13538a284e6b410301a93e5be179813654046" name="busybox-gzip" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="0022394cd17d54b0b082b0c4b1eb211040aeda49f8de954ba532fd65a94c259a" name="busybox-gzip" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="bd202f8989be36bf013bce52bf30ac137580542dcdbbbd3e1c46078035aca475" name="busybox-hostname" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="cdbaa4f6674a70d5d2d2e57c23e86890afbac5d7a99d485547869855dea8e452" name="busybox-hostname" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="ae50e4abd4c62d4f0c16fa8e28cfb0da2e0f0b262c3f7dfc6bc2e86d396fec97" name="busybox-iproute2" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="2cf542a3347988fe03ab72ca18170792ba8033b94dad04383e974317cda31f63" name="busybox-iproute2" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="da2802ef6a1338faa448e9f9a3c748c996c707278feb91fed182c9f2366b4c00" name="busybox-iputils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="fdc430d531ddce71a51532b0149cc4e05341195f1628c533f2b49df8cf223be8" name="busybox-iputils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="10b4a9a183df704ccba4ddcb2a05f251c1f0d4d95eff6fcb6ed40b1f7b44ef9f" name="busybox-kbd" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="fa57f8250244d42ad493a37d0b8625f15209f0fea66332eee040c2175c7465a5" name="busybox-kbd" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="17d20cc735503e3545534e07e790abae250d403a85ef3c3e510ff1952fccc0e0" name="busybox-kmod" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="d9d04d93799b47b42b928fb2060121ae54897aad65c65906d75fd89dbb117710" name="busybox-kmod" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="181a99dddeecbe4e3e6a231080cc788d03faf6a3474ae415b146d36f8bc2d9f4" name="busybox-less" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="fa17f9a92e8bb57b6702779695e71e32b1d1c335f6feb1be7acb2ac45af2a889" name="busybox-less" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b84a58e6a77b56104f05838559a62453add3560559a53d542dfb4be27e78344a" name="busybox-links" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b331cdeb87bccdee9076cac635abf92c46628214198d53dfa100bac9c06af323" name="busybox-links" arch="src">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="f95eafe6794d7631a66fe8b4d13fa24f322efcd543c5f27e8fc92aa4ff92bf6b" name="busybox-links" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="089efd28b9da552220a45fb6079b45390cbdb24e5b58088f5c2b797f893857bd" name="busybox-links" arch="src">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b4e73abf841b87fe6ea83aede42753eefc1ccce1fd58ef75adda3661ca39690d" name="busybox-man" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b617a299af1072ef30cb9bd24d21a997eaf933a8f4cc8d4990b0a830af315aec" name="busybox-man" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="3a923a09c0b757f9d8472bd8dae8968454bdf618f1eea0b50af1b3225da4b6b9" name="busybox-misc" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="a1b0f3b0b01ea71ffd98f6044aba4af7b4b483f213c60d7c9c2dacc0b0d0d1a9" name="busybox-misc" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="6e7ec70f8204414fc89b76ab33e31e20e464672cc9876e29dfd7ed1e4bb5d5e9" name="busybox-ncurses-utils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="d407fdbd6b1eba3ebe11e6ad464cad4ac9d2ad13eea6b9eba1660eaaf90a48c5" name="busybox-ncurses-utils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b1b681b3584313e6c872da4ff5fca2a2509408fdf41c19d058dd8eaf354df073" name="busybox-net-tools" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="7881edebdf5bfed6f93d2afa68145ca272ceacac085f32b7d91ddc1e7ea01a0c" name="busybox-net-tools" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b8476a4f5fc6e0dceed4a4c677fd07d3e90e015dc659f268a7606d8e388c0c93" name="busybox-netcat" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b3d087ca633141fa96c209c457931dee3011d0e4e551bd2eb2cc9f46a4b9e0e1" name="busybox-netcat" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="1e3c8c43f9b3b29783c61bbb680d3bc9b1f6f39a1e25db69eddb551377de167a" name="busybox-patch" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="4076715d35a1df1082e2e2a685a57bae82e12259eed65fd2917d62b760a2db29" name="busybox-patch" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="1af70f06a6e5a9a690c5783ffa7b504f3d2e77e1fcd4f689804c825a68bc7458" name="busybox-policycoreutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="61083207a0f90843aa87a24cfd8486774e88e45b6751b3d61336be89583f3a46" name="busybox-policycoreutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="ca635136cf8bd76dadad404c359414ccdf8ffd317932ee3ef360c61544b99df4" name="busybox-procps" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="d2420d7bfd819d12351e70786b13c4584756ddc839f5b0b4aee9969b92deef3f" name="busybox-procps" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="1cf5b9c688512861e818cbfae75eb9bff249f6e14d7c28c8c4993ce5a3a8aedd" name="busybox-psmisc" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="853089d14f3a0d5291250505bc7f4901bc8305f6e9ab3e89579a23c54a8dfcd1" name="busybox-psmisc" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="e99c74bb478b359f5b73d72fd6d6830c5d525fba2207d836d059de0641f60cce" name="busybox-sed" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="9b7ce02a271da165cfb83746e5d92c5ea1b01404d17a648adcf349a89e2020aa" name="busybox-sed" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="c93571034c0faf268a42f04a46c786fc2d4e79ce57e7ffcfb3bf2d4bb1a22682" name="busybox-selinux-tools" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="a929307f34af75778ab6f891cbfc3c223ba87aab458078053ad1b4322f538782" name="busybox-selinux-tools" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="831c87f9ad12d3ea31a17b38f728ffa4575894c99d245f9a16683f9fe1ff2c55" name="busybox-sendmail" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b46a4a335831385c65d2eff84fe57deb80fc9e94fc5a51d0af79856121f5a1c1" name="busybox-sendmail" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="37ccadbf1a9e15565780707f76db54a04998411af3f7c82ca94bf46193b94b67" name="busybox-sh" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="13f62a5a062b84c6342753b2ed9045c934ee61d105c71e511ed92463e8adeab9" name="busybox-sh" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="0c93b5b44d85a3be7fae50121a364a13316c66f5175d9fac958cfdc442cb093a" name="busybox-sharutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="7d51421c3395788eed39b9ee94f3f73d3150c3a56cdb0841153c76accceed6e9" name="busybox-sharutils" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="dbf5f407c87d879bcfc6b5d2380b797001ba10eea07e3f8ebc2c2532cb78ba06" name="busybox-static" arch="aarch64">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="5635775e291b627089155f9b9a1e54074f92cbc3d19cfd34e8d6b23e2de9031f" name="busybox-static" arch="ppc64le">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="e0b91d5124a538d2fb5ecde26bc09a9066219e5ecd7d90faf1ff9e2a13372a43" name="busybox-static" arch="s390x">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="d2ae172e9d1b5b6571898f4fb2f660a32c541579ce018f008f7f30f00b14990e" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="63397683859610b4c98884d1dadd97a8c09e441e105a98d06a25beda588cf1b7" name="busybox-static" arch="aarch64">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="0c81b639e526d204e928764122992b96150d9bc04798805dbecb7e0d0ade7eb4" name="busybox-static" arch="ppc64le">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="fbb5e976d8478ff5888649014c1f8a408c011c01e2c6ef2f9caa1316c15cb81a" name="busybox-static" arch="s390x">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="fa7fa963caff60cc787255e272c1fbbae61a8ae47487e4fab5cb74134ca06b5d" name="busybox-static" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="57ed7be72c17d64da147b2a2b2d6eedc4e9746a1def62107deb1e183d1a60944" name="busybox-syslogd" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="57a35881a615742dbb7e0c4fba5742561eaeae4f3c3fe2dadd3862f52f7b419e" name="busybox-syslogd" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="404530bb9c6a702c0a22cae6355a920623e6747ef9eee670cc48ee655ae13761" name="busybox-sysvinit-tools" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="5eb3fc861b9db18d70d7706bd596ffa97d5b1fce97358370971b1a678ce8a897" name="busybox-sysvinit-tools" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="3c75a6a3f07191d63e2b447b1087220b1edcfdc1a641060ca2f7e7c2cabe50a2" name="busybox-tar" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="4482770ef65c32a421c5f4640a4227ab9bb653a4894fc42d7151cc56425eb44e" name="busybox-tar" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="5a87ebcbe3c799acabd46e8d3ebbd1c0a2b258bf4b85ca680ab613e3ba01e4be" name="busybox-telnet" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="afce7136591b3516f689cc2f85b58fa30939ede50744ca241bfc1ffb61d20f17" name="busybox-telnet" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="4857285dcd518dd3d15e0bc00e2e1176bb76eccf0c65e6c08b4c909d3cd8cec3" name="busybox-testsuite" arch="aarch64">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="33e6b7639cd8fab6825c9789131bce793fe6ec882c2fd585d351ac53f4992855" name="busybox-testsuite" arch="ppc64le">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="4e31d1aad6f823166f7688f9c576c65d04e6cfada434a80365ea7dd1e6d752c4" name="busybox-testsuite" arch="s390x">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="a7c520e7af7d54e816394cc2a836a2f0d42aa929e5fdfb4b0fe20f49d63854db" name="busybox-testsuite" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="321831f009142b28bbab2365c6d2da1cee3be2340e46039b124c1cc95a119dbc" name="busybox-testsuite" arch="aarch64">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="8de34a075ec56967340db561206024dbaf32a231ed66e2613a86253f79c0c826" name="busybox-testsuite" arch="ppc64le">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="b4f20020a9cf1c8739fbd2d206a6d221e899480a5bb0684b5feaab5f31332cdc" name="busybox-testsuite" arch="s390x">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="b1e50b3c8423eff25eced93a5a8333f357aeae3b94fa89bc489eb1ecb29796cd" name="busybox-testsuite" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="fc4679e00d514804888297d51b26e8613d93a7111ab034e79a9eb6789dc749a0" name="busybox-tftp" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="c7f80f5d92f36a36d9a66c23d8f9a3ce3ca7b7c39e6ececb24bb4dfdda6d9d5a" name="busybox-tftp" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="49360c456428c1aa2c9d1d9eab040527277fa7228ffaf7400b26d34662fb4a8d" name="busybox-time" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="e52f12274bca730a9e7059e0bed750133e93ed019cdd72b98f789d0debfa16df" name="busybox-time" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="6bc15290bf392644aae04eb100b7c0e2d9ef848e2acea0cc84a68a520aba794e" name="busybox-traceroute" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="d0c9c1cce2befcdd9dd72a9cb521c646dac5334d70a5cc946ed2215bf2a0bb7f" name="busybox-traceroute" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="77c556f98f364ec99df63e5bf402105111e26b1dbb06ab4d8d61c77b4eb3b51d" name="busybox-tunctl" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="27e757c685cff53abb4a1be523cfd57be3fe4cf68b794e01115ad20f037e46dd" name="busybox-tunctl" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="afa990e5991c15405e559d683236c9b8546cc862b11cc5b5f322c759555ed64a" name="busybox-unzip" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="1d66d39e1ccb1b848ee87679aecd876914e00d490814894e5075b4cbcca53b87" name="busybox-unzip" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="ddea16a8b2a4fe82acd27471052cbe450128ebd60a2ea6f0970d0a62ec297c4d" name="busybox-util-linux" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="a3028250a6185c9995bd0caf30b2ebebe602651da7ebf9fb98d9f31551424db7" name="busybox-util-linux" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="7daf1e0d49492aebc1b3a32fc014902e105369411654c6e392f96bfa77cc1c7b" name="busybox-vi" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="1954b543fda81ab6dd1e9c1c77a1be22cc5f72e5563bb1f1856c13548f74dbf8" name="busybox-vi" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="7af6c3bf29455754b4e7f20801fff728748f79a70a7b845f4fb02652b4167dc5" name="busybox-vlan" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b319677f2663cf96d9cddcac8fb5c22a4feb5ad9395f9dfed97c26b91958fcaf" name="busybox-vlan" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="8ebdfa486fb6f71bffdefb7ae32532dac948d73dd474fb332195eb98f62e5ad8" name="busybox-warewulf3" arch="aarch64">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="c4ea78d7ecde46e608c9451f613b3f8ff646b89464854c0fd2f446a6f41572eb" name="busybox-warewulf3" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1601380800">- Disable RPM builtin, did become pretty useless
- Disable popmaildir and mime utilities</changelog>
  <changelog author="lnussel@suse.de" date="1605873600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1607342400">- cpio-long-opt.patch: add more long options to cpio for IBS/unrpm</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
</package>
<package pkgid="6adfebc36492155f0d15237f41481fb795c619cc4e8f1a25afaa3c546ce36881" name="busybox-warewulf3" arch="aarch64">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="40cebf47c47192305674a3b32baf0cadcba8a63e207f703cd03140c99d5116c8" name="busybox-warewulf3" arch="x86_64">
  <version epoch="0" ver="1.35.0" rel="150400.3.8.1"/>
  <changelog author="kukuk@suse.com" date="1607515200">- Don't require nogroup for adduser command, as this can lead to
  a dependency cycle with sysusers-tools.</changelog>
  <changelog author="kukuk@suse.com" date="1609848000">- sendmail-ignore-F-option.patch: ignore -F option as used by
  cron (workaround for [bbn#13426])</changelog>
  <changelog author="kukuk@suse.com" date="1609848001">- Update to version 1.32.1
  - fixes a case where in ash, "wait" never finishes.</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Update to version 1.33.0
  - many bug fixes and new features
- update_passwd_selinux_fix.patch upstream compile fix for SELinux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620388800">- update to 1.33.1:
  * httpd: fix sendfile
  * ash: fix HISTFILE corruptio
  * ash: fix unset variable pattern expansion
  * traceroute: fix option parsing
  * gunzip: fix for archive corruption
- drop update_passwd_selinux_fix.patch, included upstream
- add upstream signing key and verify source signature</changelog>
  <changelog author="eich@suse.com" date="1633780800">- Create separate 'Warewulf3' (https://github.com/warewulf/warewulf3)
  flavor of busybox with the
  additional setting:
  CONFIG_REBOOT=y
  CONFIG_SWITCH_ROOT=y
  CONFIG_CTTYHACK=y
  (bsc#1191514).</changelog>
  <changelog author="coolo@suse.com" date="1634817600">- Update to 1.34.1:
  * build system: use SOURCE_DATE_EPOCH for timestamp if available
  * many bug fixes and new features
  * touch: make FEATURE_TOUCH_NODEREF unconditional</changelog>
  <changelog author="coolo@suse.com" date="1634817601">- Remove the duplicated config entries and construct the snippets
  on the fly based on the main config. This way it's easier to
  keep track of what's different</changelog>
  <changelog author="lukas.lansky@suse.com" date="1634904000">- Enable fdisk (jsc#CAR-16)
- Add testsuite-gnu-echo.patch: testing.sh to use GNU echo</changelog>
  <changelog author="eich@suse.com" date="1635336000">- Build busybox-warewulf3 for i586 as well. This allowes to set up
  i586 nodes.</changelog>
  <changelog author="coolo@suse.com" date="1635595200">- Disable crc32 to avoid conflict with perl-Archive-Zip
  (until some project really requires crc32)</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1641470400">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2017-16544 (bsc#1069412): Insufficient sanitization of filenames when autocompleting
  * CVE-2015-9261 (bsc#1102912): huft_build misuses a pointer, causing segfaults
  * CVE-2016-2147 (bsc#970663): out of bounds write (heap) due to integer underflow in udhcpc
  * CVE-2016-2148 (bsc#970662): heap-based buffer overflow in OPTION_6RD parsing
  * CVE-2016-6301 (bsc#991940): NTP server denial of service flaw
  * CVE-2017-15873 (bsc#1064976): The get_next_block function in archival/libarchive/decompress_bunzip2.c has an Integer Overflow
  * CVE-2017-15874 (bsc#1064978): archival/libarchive/decompress_unlzma.c has an Integer Underflow
  * CVE-2019-5747 (bsc#1121428): out of bounds read in udhcp components
  * CVE-2021-42373, CVE-2021-42374, CVE-2021-42375, CVE-2021-42376,
    CVE-2021-42377, CVE-2021-42378, CVE-2021-42379, CVE-2021-42380,
    CVE-2021-42381, CVE-2021-42382, CVE-2021-42383, CVE-2021-42384,
    CVE-2021-42385, CVE-2021-42386 (bsc#1192869) : v1.34.0 bugfixes
  - CVE-2021-28831 (bsc#1184522): invalid free or segmentation fault via malformed gzip data
  - CVE-2018-20679 (bsc#1121426): out of bounds read in udhcp
  - CVE-2018-1000517 (bsc#1099260):  Heap-based buffer overflow in the retrieve_file_data()
  - CVE-2011-5325 (bsc#951562): tar directory traversal
  - CVE-2018-1000500 (bsc#1099263):  wget: Missing SSL certificate validation</changelog>
  <changelog author="kukuk@suse.com" date="1641988800">- Update to 1.35.0
  - awk: fix printf %%, fix read beyond end of buffer
  - chrt: silence analyzer warning
  - libarchive: remove duplicate forward declaration
  - mount: "mount -o rw ...." should not fall back to RO mount
  - ps: fix -o pid=PID,args interpreting entire "PID,args" as header
  - tar: prevent malicious archives with long name sizes causing OOM
  - udhcpc6: fix udhcp_find_option to actually find DHCP6 options
  - xxd: fix -p -r
  - support for new optoins added to basename, cpio, date, find,
    mktemp, wget and others
- Adjust busybox.config for new features in find, date and cpio</changelog>
  <changelog author="dimstar@opensuse.org" date="1648036800">- BuildRequire hostname: the test suite wants to compare the output
  of 'hostname' against 'busybox hostname'. We should not rely
  hostname to be present in the build environment.</changelog>
  <changelog author="mpdesouza@suse.com" date="1648641600">- Enable udhcpc</changelog>
  <changelog author="mpdesouza@suse.com" date="1654862400">- Enable switch_root
  With this change virtme --force-initramfs works as expected.</changelog>
  <changelog author="lnussel@suse.de" date="1656590400">- prepare spec file for rpmbuild --build-in-place --noprep
- use bcond for static and ww3 subpackages
- fix verbose flag</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1666008000">- Annotate CVEs already fixed in upstream, but not mentioned in .changes:
  * CVE-2014-9645 (bsc#914660):  strips of / in module names that can lead to loading unwanted modules</changelog>
  <changelog author="radoslav.kolev@suse.com" date="1668427200">- Fix build under SLE-12</changelog>
  <changelog author="dimstar@opensuse.org" date="1669204800">- Add e63d7cdf.patch: awk: fix use after free (CVE-2022-30065,
  boo#1199744).</changelog>
</package>
<package pkgid="9874afc7233d415c853c522a355f1068d8ebe485284c6c60997f9d90ce449895" name="busybox-wget" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="4d0f92edb9d80acf4fd559b5b958c372ad70349dff1e766b77b0e3514b3f276e" name="busybox-wget" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="b8de8148c8e7e1279c83e1fbdc117e14f02f03f80919ad39d4d9ba26962759ce" name="busybox-which" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="e42688bd015a6c1eda72e2e1254532d9fd4837aef5e6de05ae8c060f9116b48a" name="busybox-which" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="54298542fa93679cc7b5c22e6dec131e30dc6f2287a9e9b53464df7722cbfb62" name="busybox-whois" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="f8ae72b644181fa4d7f9115b96a19f3421ed53a37a331aba999b8964a5417a96" name="busybox-whois" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="2c3dbf63e414eeeb5e4bc6f37d3cd7343bc3c2ff66b461146b0015b82d4fc989" name="busybox-xz" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.2.1"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="9bade83362efeeb9f785ef6d2cf1d241cee46cac347aa990bc869a77d8cbcb02" name="busybox-xz" arch="noarch">
  <version epoch="0" ver="1.35.0" rel="150400.4.3.14"/>
  <changelog author="kukuk@suse.com" date="1595937600">- busybox-syslogd: add conflict with syslogd
- busybox-iproute2: add conflict with wicked-service for ifup
- busybox-sh: remove bogus %ghost entry</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Create new sub-packages: selinux-tools and policycoreutils</changelog>
  <changelog author="kukuk@suse.com" date="1597320000">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.com" date="1598616000">- Add zgrep to gzip sub-package</changelog>
  <changelog author="kukuk@suse.com" date="1599825600">- busybox-vi: conflict with all vi variants</changelog>
  <changelog author="dimstar@opensuse.org" date="1600257600">- busybox-vi: also conflict with gvim, one more vi variant.</changelog>
  <changelog author="kukuk@suse.com" date="1600689600">- Add post/postun requires for busybox to busybox-sh
  (/usr/bin/ash is a symlink to busybox)</changelog>
  <changelog author="kukuk@suse.com" date="1601380800">- Don't fail if rpm will not be build</changelog>
  <changelog author="dimstar@opensuse.org" date="1606824000">- Add conflicts: bridge-utils to busybox-iproute2: both packages
  provide /usr/sbin/brctl.</changelog>
  <changelog author="kukuk@suse.com" date="1607515200">- busybox-adduser needs "nogroup" for system accounts, which have
  no group specified.</changelog>
  <changelog author="dimstar@opensuse.org" date="1609156800">- busybox-sendmail also conflicts with the postfix-bdb flavor.</changelog>
  <changelog author="kukuk@suse.com" date="1612267200">- Add zmore and zless</changelog>
  <changelog author="lnussel@suse.de" date="1614686400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- busybox-misc needs to conflict with lzop and sysstat as it
  replaces files of those. Usrmerge reveals that conflict.</changelog>
  <changelog author="kukuk@suse.com" date="1625140800">- Add util-linux-systemd as BuildRequires</changelog>
  <changelog author="kukuk@suse.com" date="1627905600">- Add shadow as BuildRequires</changelog>
  <changelog author="schubi@suse.com" date="1629288000">- Use libalternatives instead of update-alternatives.</changelog>
  <changelog author="schubi@suse.de" date="1634904000">- Removed libalternatives machanism. Using direct link from
  /usr/bin/busybox to /usr/bin/sh. The package is conflicting with
  the new packages bash-sh which has a link for /usr/bin/sh too.</changelog>
  <changelog author="kukuk@suse.com" date="1644494400">- Drop update-alternatives support</changelog>
  <changelog author="dmueller@suse.com" date="1647345600">- replace copy from buildroot's gzip with a reimplementation
  that is not GPLv3 (jsc#PM-3301)</changelog>
</package>
<package pkgid="85f4f3bcfb4452d9c52df5f8e4c8682c224f38a29370534e6080c5d9e63c3a0f" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.56" rel="150200.24.1"/>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1612872000">- Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
</package>
<package pkgid="0605ee22c055f3c594fe9568eaf78ba497b12444e68ae67f634e44d35c5ddcf6" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.56" rel="150200.24.1"/>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1612872000">- Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
</package>
<package pkgid="a4316f4ebf0ccc2e54f50f0c9367ae138e2c30f16b3fc8c5cf62b040d9831bf9" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.60" rel="150200.27.1"/>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1612872000">- Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
  <changelog author="meissner@suse.com" date="1671710400">- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch</changelog>
</package>
<package pkgid="e443545e1b737dfc61c141218e2b502ebcee3b14081e0449ecf61787a00ea01a" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.60" rel="150200.27.1"/>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1612872000">- Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
  <changelog author="meissner@suse.com" date="1671710400">- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch</changelog>
</package>
<package pkgid="a21ebb268652c8e02380364b0383063b732dcdbdf87dabc0eafbbeb52ab2671c" name="ca-certificates-mozilla-prebuilt" arch="noarch">
  <version epoch="0" ver="2.56" rel="150200.24.1"/>
  <changelog author="lnussel@suse.de" date="1633348800">- new package for minimal base containers (jsc#SLE-22162)</changelog>
</package>
<package pkgid="e706bd4dd05a0ffeee210632124b2723130810d59a716e8ae19a0774f7c63f81" name="ca-certificates-mozilla-prebuilt" arch="src">
  <version epoch="0" ver="2.56" rel="150200.24.1"/>
  <changelog author="lnussel@suse.de" date="1633348800">- new package for minimal base containers (jsc#SLE-22162)</changelog>
</package>
<package pkgid="4ea2baa7883936f7419c6429c779c3d8df383b9da746e3fb79a53af757179199" name="ca-certificates-mozilla-prebuilt" arch="noarch">
  <version epoch="0" ver="2.60" rel="150200.27.1"/>
  <changelog author="lnussel@suse.de" date="1633348800">- new package for minimal base containers (jsc#SLE-22162)</changelog>
</package>
<package pkgid="3405312c4bf1b5d37d6275245b58b80b2a60dfa1a26c744638bc4b664ed1a9a4" name="ca-certificates-mozilla-prebuilt" arch="src">
  <version epoch="0" ver="2.60" rel="150200.27.1"/>
  <changelog author="lnussel@suse.de" date="1633348800">- new package for minimal base containers (jsc#SLE-22162)</changelog>
</package>
<package pkgid="b849701f5465aa1362aace4358cff21f70c8f06fa8fe7b630a6d73ee41800e1f" name="caca-utils" arch="aarch64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="8dbe5077acfea7350ae88eead6369dbe8d15c33009e260c026af74ba77f3d246" name="caca-utils" arch="ppc64le">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="848ce2c19615178077bfcbe1297b483a50d034017ef03c61885b8c691c0069ee" name="caca-utils" arch="s390x">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="63077744b2ff07d512e9362e95f0bb585570f7e4ed82a392c7fd8169e43e918c" name="caca-utils" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="24344ec16b2ce0823d0ca14977beac4a81cacb2bacb6f67075ecfcc19b46af6a" name="caca-utils" arch="aarch64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.9.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
  <changelog author="bbrunner@suse.com" date="1660305600">- More overflow prevention of multiplying large ints
  [bsc#1182731, CVE-2021-3410, libcaca-bsc1182731-prevent-overflow.patch]</changelog>
</package>
<package pkgid="6a994956dc2572a7fbd496283d679327c881a8bb6fef1b48e7d0a85c4f8c5d77" name="caca-utils" arch="ppc64le">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.9.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
  <changelog author="bbrunner@suse.com" date="1660305600">- More overflow prevention of multiplying large ints
  [bsc#1182731, CVE-2021-3410, libcaca-bsc1182731-prevent-overflow.patch]</changelog>
</package>
<package pkgid="d9529eede44713251da68a176eef95e128c87341bebc9549c14a92c008593903" name="caca-utils" arch="s390x">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.9.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
  <changelog author="bbrunner@suse.com" date="1660305600">- More overflow prevention of multiplying large ints
  [bsc#1182731, CVE-2021-3410, libcaca-bsc1182731-prevent-overflow.patch]</changelog>
</package>
<package pkgid="7b698df8bbecd38e94173a9fdcea3435b2f01cdc340e1d682225ca68435384ce" name="caca-utils" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.9.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
  <changelog author="bbrunner@suse.com" date="1660305600">- More overflow prevention of multiplying large ints
  [bsc#1182731, CVE-2021-3410, libcaca-bsc1182731-prevent-overflow.patch]</changelog>
</package>
<package pkgid="537de718394f0ee367424a632d03dcc594ae5bc65d57743a51438faaa09fd067" name="capnproto" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="150400.3.4.1"/>
  <changelog author="i@marguerite.su" date="1424260800">- initial version 0.5.1</changelog>
  <changelog author="i@marguerite.su" date="1426420800">- update version 0.5.1.2</changelog>
  <changelog author="edogawa@aon.at" date="1490875200">- update version 0.6-dev</changelog>
  <changelog author="aloisio@gmx.com" date="1503921600">- Update to stable version 0.6.1</changelog>
  <changelog author="aloisio@gmx.com" date="1539345600">- Update to version 0.7.0 (see https://capnproto.org/news)</changelog>
  <changelog author="jengelh@inai.de" date="1539345601">- Remove bias from descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 0.8
  * Multi-stream Flow Control
  * HTTP-over-Cap'n-Proto
  * KJ improvements
  * Lots and lots of minor tweaks and fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1629028800">- Update to version 0.9
  * There?s no huge new features in this release, but there are
    many minor improvements and bug fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1632657600">- Update to version 0.9.1
  * only import fiber related headers when fibers are enabled
  * use more accurate names for tests
  * Fix copy-pasto resulting in uninitialized use of kind
  * Fix capnp/capnpc --version when built using CMake
  * Fix feed.xml</changelog>
  <changelog author="qzhao@suse.com" date="1670241600">- Add capnproto-CVE-2022-46149.patch: Backport from upstream, apply
  data offset for list-of-pointers at access time rather than
  ListReader creation time(bsc#1205968, CVE-2022-46149).</changelog>
</package>
<package pkgid="7656c0686e06941ba5bf9d4f5a15a414a42c1733edd5fa5d8dd3ed4ce6419ccc" name="capnproto" arch="ppc64le">
  <version epoch="0" ver="0.9.1" rel="150400.3.4.1"/>
  <changelog author="i@marguerite.su" date="1424260800">- initial version 0.5.1</changelog>
  <changelog author="i@marguerite.su" date="1426420800">- update version 0.5.1.2</changelog>
  <changelog author="edogawa@aon.at" date="1490875200">- update version 0.6-dev</changelog>
  <changelog author="aloisio@gmx.com" date="1503921600">- Update to stable version 0.6.1</changelog>
  <changelog author="aloisio@gmx.com" date="1539345600">- Update to version 0.7.0 (see https://capnproto.org/news)</changelog>
  <changelog author="jengelh@inai.de" date="1539345601">- Remove bias from descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 0.8
  * Multi-stream Flow Control
  * HTTP-over-Cap'n-Proto
  * KJ improvements
  * Lots and lots of minor tweaks and fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1629028800">- Update to version 0.9
  * There?s no huge new features in this release, but there are
    many minor improvements and bug fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1632657600">- Update to version 0.9.1
  * only import fiber related headers when fibers are enabled
  * use more accurate names for tests
  * Fix copy-pasto resulting in uninitialized use of kind
  * Fix capnp/capnpc --version when built using CMake
  * Fix feed.xml</changelog>
  <changelog author="qzhao@suse.com" date="1670241600">- Add capnproto-CVE-2022-46149.patch: Backport from upstream, apply
  data offset for list-of-pointers at access time rather than
  ListReader creation time(bsc#1205968, CVE-2022-46149).</changelog>
</package>
<package pkgid="71602bd5799dc4f18dcfb44dc54badbf7ce13292a2f2af02499c7001539a5e1c" name="capnproto" arch="s390x">
  <version epoch="0" ver="0.9.1" rel="150400.3.4.1"/>
  <changelog author="i@marguerite.su" date="1424260800">- initial version 0.5.1</changelog>
  <changelog author="i@marguerite.su" date="1426420800">- update version 0.5.1.2</changelog>
  <changelog author="edogawa@aon.at" date="1490875200">- update version 0.6-dev</changelog>
  <changelog author="aloisio@gmx.com" date="1503921600">- Update to stable version 0.6.1</changelog>
  <changelog author="aloisio@gmx.com" date="1539345600">- Update to version 0.7.0 (see https://capnproto.org/news)</changelog>
  <changelog author="jengelh@inai.de" date="1539345601">- Remove bias from descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 0.8
  * Multi-stream Flow Control
  * HTTP-over-Cap'n-Proto
  * KJ improvements
  * Lots and lots of minor tweaks and fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1629028800">- Update to version 0.9
  * There?s no huge new features in this release, but there are
    many minor improvements and bug fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1632657600">- Update to version 0.9.1
  * only import fiber related headers when fibers are enabled
  * use more accurate names for tests
  * Fix copy-pasto resulting in uninitialized use of kind
  * Fix capnp/capnpc --version when built using CMake
  * Fix feed.xml</changelog>
  <changelog author="qzhao@suse.com" date="1670241600">- Add capnproto-CVE-2022-46149.patch: Backport from upstream, apply
  data offset for list-of-pointers at access time rather than
  ListReader creation time(bsc#1205968, CVE-2022-46149).</changelog>
</package>
<package pkgid="45a23aea5d836cf1653bda5c7bf30cd238eb463bb2b7117ba2f0cd17c3872cbe" name="capnproto" arch="src">
  <version epoch="0" ver="0.9.1" rel="150400.3.4.1"/>
  <changelog author="i@marguerite.su" date="1424260800">- initial version 0.5.1</changelog>
  <changelog author="i@marguerite.su" date="1426420800">- update version 0.5.1.2</changelog>
  <changelog author="edogawa@aon.at" date="1490875200">- update version 0.6-dev</changelog>
  <changelog author="aloisio@gmx.com" date="1503921600">- Update to stable version 0.6.1</changelog>
  <changelog author="aloisio@gmx.com" date="1539345600">- Update to version 0.7.0 (see https://capnproto.org/news)</changelog>
  <changelog author="jengelh@inai.de" date="1539345601">- Remove bias from descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 0.8
  * Multi-stream Flow Control
  * HTTP-over-Cap'n-Proto
  * KJ improvements
  * Lots and lots of minor tweaks and fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1629028800">- Update to version 0.9
  * There?s no huge new features in this release, but there are
    many minor improvements and bug fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1632657600">- Update to version 0.9.1
  * only import fiber related headers when fibers are enabled
  * use more accurate names for tests
  * Fix copy-pasto resulting in uninitialized use of kind
  * Fix capnp/capnpc --version when built using CMake
  * Fix feed.xml</changelog>
  <changelog author="qzhao@suse.com" date="1670241600">- Add capnproto-CVE-2022-46149.patch: Backport from upstream, apply
  data offset for list-of-pointers at access time rather than
  ListReader creation time(bsc#1205968, CVE-2022-46149).</changelog>
</package>
<package pkgid="006369e6f400281ab39289574703330441ce4d115f6bb7691166e1231084495f" name="capnproto" arch="x86_64">
  <version epoch="0" ver="0.9.1" rel="150400.3.4.1"/>
  <changelog author="i@marguerite.su" date="1424260800">- initial version 0.5.1</changelog>
  <changelog author="i@marguerite.su" date="1426420800">- update version 0.5.1.2</changelog>
  <changelog author="edogawa@aon.at" date="1490875200">- update version 0.6-dev</changelog>
  <changelog author="aloisio@gmx.com" date="1503921600">- Update to stable version 0.6.1</changelog>
  <changelog author="aloisio@gmx.com" date="1539345600">- Update to version 0.7.0 (see https://capnproto.org/news)</changelog>
  <changelog author="jengelh@inai.de" date="1539345601">- Remove bias from descriptions.</changelog>
  <changelog author="rbrown@suse.com" date="1571313600">- Remove obsolete Groups tag (fate#326485)</changelog>
  <changelog author="aloisio@gmx.com" date="1587988800">- Update to version 0.8
  * Multi-stream Flow Control
  * HTTP-over-Cap'n-Proto
  * KJ improvements
  * Lots and lots of minor tweaks and fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1629028800">- Update to version 0.9
  * There?s no huge new features in this release, but there are
    many minor improvements and bug fixes.</changelog>
  <changelog author="aloisio@gmx.com" date="1632657600">- Update to version 0.9.1
  * only import fiber related headers when fibers are enabled
  * use more accurate names for tests
  * Fix copy-pasto resulting in uninitialized use of kind
  * Fix capnp/capnpc --version when built using CMake
  * Fix feed.xml</changelog>
  <changelog author="qzhao@suse.com" date="1670241600">- Add capnproto-CVE-2022-46149.patch: Backport from upstream, apply
  data offset for list-of-pointers at access time rather than
  ListReader creation time(bsc#1205968, CVE-2022-46149).</changelog>
</package>
<package pkgid="d74f91d0ea4da3afa4eccee984131629b005d915dea4fefb4a3b8e747566e976" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.60.0" rel="150300.21.23.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1617019200">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
</package>
<package pkgid="15b60ae7789d68c17908455e41baf68d5a257fa00de0301e98695702f527a70d" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.60.0" rel="150300.21.23.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1617019200">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
</package>
<package pkgid="fc837d6bcf4d5ad051281dde73fbe96530694299cfe132268c894b597e4277a7" name="cargo" arch="s390x">
  <version epoch="0" ver="1.60.0" rel="150300.21.23.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1617019200">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
</package>
<package pkgid="a0232af747fa98e399f04d23963f30eae09f82f52196642da96e2fc48adf0466" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.60.0" rel="150300.21.23.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1617019200">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
</package>
<package pkgid="862dccc6e157b1880c087f8b7ea35eb215cf28a1073ae0e772b378184e1c3c0f" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.61.0" rel="150300.21.26.1"/>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
</package>
<package pkgid="4608a8076710407bc1c3cd69d4c0f2a9c0c1af8968effd9bd2c30dd02e4c506a" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.61.0" rel="150300.21.26.1"/>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
</package>
<package pkgid="fe8f0758e6c3fb5369ece37716ed3a1fcc64bd585c591d7a663f81cdd6386521" name="cargo" arch="s390x">
  <version epoch="0" ver="1.61.0" rel="150300.21.26.1"/>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
</package>
<package pkgid="54758c0eb366f9051edf4e5304baaf6deaaa50435cb63a9837f170a096694b75" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.61.0" rel="150300.21.26.1"/>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
</package>
<package pkgid="5197fc4cf9413ce5d6a6953b36e037d99a6b9df306b4d129047a7bc80a317ee7" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.62.0" rel="150300.21.29.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
</package>
<package pkgid="a57e6544956a54129901ddf33bf2df73eb5de004fe1c5b911c56d71e48fd1280" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.62.0" rel="150300.21.29.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
</package>
<package pkgid="bb775bbef00738a80020f0fb519587e7cbf20dab64fe2695d47d41c23dca6eb3" name="cargo" arch="s390x">
  <version epoch="0" ver="1.62.0" rel="150300.21.29.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
</package>
<package pkgid="d7d9550d5bcc164061fe39c0fbaa6bd9e8c7131d0acfd40afa3b5c5e9350f4de" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.62.0" rel="150300.21.29.1"/>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
</package>
<package pkgid="f86899b38636b968a0b0d36e6ce574d7e29114c8cc615de4361cf82e0dd7a913" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.63.0" rel="150300.21.32.1"/>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
</package>
<package pkgid="6a6ae079d9d4a8ecd911f8238fed46916f9012787fb01bae9248efa547c3a778" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.63.0" rel="150300.21.32.1"/>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
</package>
<package pkgid="1b5a177b1f120ed99c7ca69bcc15a7d32c1f9d09a87007a8dae575d381eb23b4" name="cargo" arch="s390x">
  <version epoch="0" ver="1.63.0" rel="150300.21.32.1"/>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
</package>
<package pkgid="2e86fe9f1d6926feb6e8c6c45d4823b7fa7af6eadf5c1b0d08fb857964ba0528" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.63.0" rel="150300.21.32.1"/>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
</package>
<package pkgid="17c558fc3675bf00597749b1255e41ec34bffe8b7a0c5d78b6be1342953c8d5a" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.64.0" rel="150300.21.35.1"/>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
</package>
<package pkgid="d6ee34f2f7ed4a371670c293d4ae13915c1a786a92e0080f1bf830901df84bb5" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.64.0" rel="150300.21.35.1"/>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
</package>
<package pkgid="3b5cfabcea3c779bb7671cf2f14b3fd7fe54e3b6a056d76f64915a1cbb08312a" name="cargo" arch="s390x">
  <version epoch="0" ver="1.64.0" rel="150300.21.35.1"/>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
</package>
<package pkgid="8d70262501aa830a4936a1626c1986357acf32049e0c221bb645cedee5f945f3" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="150300.21.35.1"/>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
</package>
<package pkgid="ffabecf41d1f4219f6123b73d64576d48707a256fffdd1bfa8fe19360bfdee91" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.65.0" rel="150300.21.38.1"/>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
</package>
<package pkgid="b632dafaf23e3f73bc1b9d6eadde49e12a54e4f02ba9006d8960ce4bdbdf8c5d" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.65.0" rel="150300.21.38.1"/>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
</package>
<package pkgid="7eccad93bf76e1ee3ce1a0af09a5a926f1065943c82aad351114f7e71ae09f63" name="cargo" arch="s390x">
  <version epoch="0" ver="1.65.0" rel="150300.21.38.1"/>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
</package>
<package pkgid="900133cfb60f21e3f1449f8072bee541cb9a4b60c3969e83687759037185f49b" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.65.0" rel="150300.21.38.1"/>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
</package>
<package pkgid="5c3501a6ca2f94fa12d92ffbcd332414346fabbce2fe3cfe153f0ba5e9601a6c" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.66.0" rel="150400.24.3.1"/>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
</package>
<package pkgid="023ce4224aadab121651296bd1b41662992e1c4cbef2bfef1ec2baf8bed782ff" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.66.0" rel="150400.24.3.1"/>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
</package>
<package pkgid="fccecba641139e54cd9a2892cbfde9ef7ed0ba627fa95bd74744f74450d193c0" name="cargo" arch="s390x">
  <version epoch="0" ver="1.66.0" rel="150400.24.3.1"/>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
</package>
<package pkgid="3e669288e73b4ef38c422b7c6dd48e515751d31db10e4295d77c0b8b3ce36608" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150400.24.3.1"/>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
</package>
<package pkgid="23f6698a7cae78e8ca96d19b434a19eec9ab27701409a7ee98404365dafe2a83" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.67.0" rel="150400.24.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1625572800">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
</package>
<package pkgid="ea750d0079a4ae1c698ce2a3e6f5f4330805bdc13fef22987e4066b47938de78" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.67.0" rel="150400.24.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1625572800">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
</package>
<package pkgid="90c8aebc4af15b3e67e74684c5c11d0dc34b8d4af827c516a481e03f33ceb295" name="cargo" arch="s390x">
  <version epoch="0" ver="1.67.0" rel="150400.24.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1625572800">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
</package>
<package pkgid="f113a47f21b329723121b4f95265ca7d897305c5c507e6c0445c6d7669cfdb44" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.67.0" rel="150400.24.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1625572800">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
</package>
<package pkgid="0a8e34aa7464f153015fde91dab0585802bfda48bb270543f177394ccece2147" name="cargo-auditable" arch="aarch64">
  <version epoch="0" ver="0.5.2~0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">- Initial commit</changelog>
</package>
<package pkgid="b3f10f3d8da50e32c8bc57e7529a336b86a9b4791a5906232cd037a94029dc54" name="cargo-auditable" arch="ppc64le">
  <version epoch="0" ver="0.5.2~0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">- Initial commit</changelog>
</package>
<package pkgid="401257e68cbe903e0d8d182467db3489eea706c73cf051438b68f8d80e07fb72" name="cargo-auditable" arch="s390x">
  <version epoch="0" ver="0.5.2~0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">- Initial commit</changelog>
</package>
<package pkgid="ad6441fc9f0075ec44af2a5a5daf76329103692c652296777ac7ce753e258cc8" name="cargo-auditable" arch="src">
  <version epoch="0" ver="0.5.2~0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">- Initial commit</changelog>
</package>
<package pkgid="a646778db5dd0c14d600a16feecf79749723faae7ec761a8a06487b50554c467" name="cargo-auditable" arch="x86_64">
  <version epoch="0" ver="0.5.2~0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">- Initial commit</changelog>
</package>
<package pkgid="6f19932668fd7e4bdd696a1a0246e745efcde1080a2acdc76d00773641c37b6c" name="cargo1.59" arch="aarch64">
  <version epoch="0" ver="1.59.0" rel="150300.7.7.2"/>
  <changelog author="william.brown@suse.com" date="1645790400">Version 1.59.0 (2022-02-24)
  Language
--------
- [Stabilize default arguments for const generics][90207]
- [Stabilize destructuring assignment][90521]
- [Relax private in public lint on generic bounds and where clauses of trait impls][90586]
- [Stabilize asm! and global_asm! for x86, x86_64, ARM, Aarch64, and RISC-V][91728]
  Compiler
--------
- [Stabilize new symbol mangling format, leaving it opt-in (-Csymbol-mangling-version=v0)][90128]
- [Emit LLVM optimization remarks when enabled with `-Cremark`][90833]
- [Fix sparc64 ABI for aggregates with floating point members][91003]
- [Warn when a `#[test]`-like built-in attribute macro is present multiple times.][91172]
- [Add support for riscv64gc-unknown-freebsd][91284]
- [Stabilize `-Z emit-future-incompat` as `--json future-incompat`][91535]
  Libraries
---------
- [Remove unnecessary bounds for some Hash{Map,Set} methods][91593]
  Stabilized APIs
- [`std::thread::available_parallelism`][available_parallelism]
- [`Result::copied`][result-copied]
- [`Result::cloned`][result-cloned]
- [`arch::asm!`][asm]
- [`arch::global_asm!`][global_asm]
- [`ops::ControlFlow::is_break`][is_break]
- [`ops::ControlFlow::is_continue`][is_continue]
- [`TryFrom&lt;char&gt; for u8`][try_from_char_u8]
- [`char::TryFromCharError`][try_from_char_err]
  implementing `Clone`, `Debug`, `Display`, `PartialEq`, `Copy`, `Eq`, `Error`
- [`iter::zip`][zip]
- [`NonZeroU8::is_power_of_two`][is_power_of_two8]
- [`NonZeroU16::is_power_of_two`][is_power_of_two16]
- [`NonZeroU32::is_power_of_two`][is_power_of_two32]
- [`NonZeroU64::is_power_of_two`][is_power_of_two64]
- [`NonZeroU128::is_power_of_two`][is_power_of_two128]
- [`DoubleEndedIterator for ToLowercase`][lowercase]
- [`DoubleEndedIterator for ToUppercase`][uppercase]
- [`TryFrom&lt;&amp;mut [T]&gt; for [T; N]`][tryfrom_ref_arr]
- [`UnwindSafe for Once`][unwindsafe_once]
- [`RefUnwindSafe for Once`][refunwindsafe_once]
- [armv8 neon intrinsics for aarch64][stdarch/1266]
  Const-stable:
- [`mem::MaybeUninit::as_ptr`][muninit_ptr]
- [`mem::MaybeUninit::assume_init`][muninit_init]
- [`mem::MaybeUninit::assume_init_ref`][muninit_init_ref]
- [`ffi::CStr::from_bytes_with_nul_unchecked`][cstr_from_bytes]
  Cargo
-----
- [Stabilize the `strip` profile option][cargo/10088]
- [Stabilize future-incompat-report][cargo/10165]
- [Support abbreviating `--release` as `-r`][cargo/10133]
- [Support `term.quiet` configuration][cargo/10152]
- [Remove `--host` from cargo {publish,search,login}][cargo/10145]
  Compatibility Notes
- [Refactor weak symbols in std::sys::unix][90846]
  This may add new, versioned, symbols when building with a newer glibc, as the
  standard library uses weak linkage rather than dynamically attempting to load
  certain symbols at runtime.
- [Deprecate crate_type and crate_name nested inside `#![cfg_attr]`][83744]
  This adds a future compatibility lint to supporting the use of cfg_attr
  wrapping either crate_type or crate_name specification within Rust files;
  it is recommended that users migrate to setting the equivalent command line
  flags.
- [Remove effect of `#[no_link]` attribute on name resolution][92034]
  This may expose new names, leading to conflicts with preexisting names in a
  given namespace and a compilation failure.
- [Cargo will document libraries before binaries.][cargo/10172]
- [Respect doc=false in dependencies, not just the root crate][cargo/10201]
- [Weaken guarantee around advancing underlying iterators in zip][83791]
- [Make split_inclusive() on an empty slice yield an empty output][89825]
- [Update std::env::temp_dir to use GetTempPath2 on Windows when available.][89999]</changelog>
  <changelog author="william.brown@suse.com" date="1646308800">- Resolve issue with multibuild test</changelog>
  <changelog author="william.brown@suse.com" date="1652270400">- bsc#1196496 - Requires gcc by default to enable linking to work correctly</changelog>
</package>
<package pkgid="388c225d982e759adf33edcf1ebbeac9e10c184a3504161cd316de24ea3f8eae" name="cargo1.59" arch="ppc64le">
  <version epoch="0" ver="1.59.0" rel="150300.7.7.2"/>
  <changelog author="william.brown@suse.com" date="1645790400">Version 1.59.0 (2022-02-24)
  Language
--------
- [Stabilize default arguments for const generics][90207]
- [Stabilize destructuring assignment][90521]
- [Relax private in public lint on generic bounds and where clauses of trait impls][90586]
- [Stabilize asm! and global_asm! for x86, x86_64, ARM, Aarch64, and RISC-V][91728]
  Compiler
--------
- [Stabilize new symbol mangling format, leaving it opt-in (-Csymbol-mangling-version=v0)][90128]
- [Emit LLVM optimization remarks when enabled with `-Cremark`][90833]
- [Fix sparc64 ABI for aggregates with floating point members][91003]
- [Warn when a `#[test]`-like built-in attribute macro is present multiple times.][91172]
- [Add support for riscv64gc-unknown-freebsd][91284]
- [Stabilize `-Z emit-future-incompat` as `--json future-incompat`][91535]
  Libraries
---------
- [Remove unnecessary bounds for some Hash{Map,Set} methods][91593]
  Stabilized APIs
- [`std::thread::available_parallelism`][available_parallelism]
- [`Result::copied`][result-copied]
- [`Result::cloned`][result-cloned]
- [`arch::asm!`][asm]
- [`arch::global_asm!`][global_asm]
- [`ops::ControlFlow::is_break`][is_break]
- [`ops::ControlFlow::is_continue`][is_continue]
- [`TryFrom&lt;char&gt; for u8`][try_from_char_u8]
- [`char::TryFromCharError`][try_from_char_err]
  implementing `Clone`, `Debug`, `Display`, `PartialEq`, `Copy`, `Eq`, `Error`
- [`iter::zip`][zip]
- [`NonZeroU8::is_power_of_two`][is_power_of_two8]
- [`NonZeroU16::is_power_of_two`][is_power_of_two16]
- [`NonZeroU32::is_power_of_two`][is_power_of_two32]
- [`NonZeroU64::is_power_of_two`][is_power_of_two64]
- [`NonZeroU128::is_power_of_two`][is_power_of_two128]
- [`DoubleEndedIterator for ToLowercase`][lowercase]
- [`DoubleEndedIterator for ToUppercase`][uppercase]
- [`TryFrom&lt;&amp;mut [T]&gt; for [T; N]`][tryfrom_ref_arr]
- [`UnwindSafe for Once`][unwindsafe_once]
- [`RefUnwindSafe for Once`][refunwindsafe_once]
- [armv8 neon intrinsics for aarch64][stdarch/1266]
  Const-stable:
- [`mem::MaybeUninit::as_ptr`][muninit_ptr]
- [`mem::MaybeUninit::assume_init`][muninit_init]
- [`mem::MaybeUninit::assume_init_ref`][muninit_init_ref]
- [`ffi::CStr::from_bytes_with_nul_unchecked`][cstr_from_bytes]
  Cargo
-----
- [Stabilize the `strip` profile option][cargo/10088]
- [Stabilize future-incompat-report][cargo/10165]
- [Support abbreviating `--release` as `-r`][cargo/10133]
- [Support `term.quiet` configuration][cargo/10152]
- [Remove `--host` from cargo {publish,search,login}][cargo/10145]
  Compatibility Notes
- [Refactor weak symbols in std::sys::unix][90846]
  This may add new, versioned, symbols when building with a newer glibc, as the
  standard library uses weak linkage rather than dynamically attempting to load
  certain symbols at runtime.
- [Deprecate crate_type and crate_name nested inside `#![cfg_attr]`][83744]
  This adds a future compatibility lint to supporting the use of cfg_attr
  wrapping either crate_type or crate_name specification within Rust files;
  it is recommended that users migrate to setting the equivalent command line
  flags.
- [Remove effect of `#[no_link]` attribute on name resolution][92034]
  This may expose new names, leading to conflicts with preexisting names in a
  given namespace and a compilation failure.
- [Cargo will document libraries before binaries.][cargo/10172]
- [Respect doc=false in dependencies, not just the root crate][cargo/10201]
- [Weaken guarantee around advancing underlying iterators in zip][83791]
- [Make split_inclusive() on an empty slice yield an empty output][89825]
- [Update std::env::temp_dir to use GetTempPath2 on Windows when available.][89999]</changelog>
  <changelog author="william.brown@suse.com" date="1646308800">- Resolve issue with multibuild test</changelog>
  <changelog author="william.brown@suse.com" date="1652270400">- bsc#1196496 - Requires gcc by default to enable linking to work correctly</changelog>
</package>
<package pkgid="0e56bdd40aed05d8a2c347fb03c4adeadbaa1f8bcbcbdc5b6624d93e56d8ced8" name="cargo1.59" arch="s390x">
  <version epoch="0" ver="1.59.0" rel="150300.7.7.2"/>
  <changelog author="william.brown@suse.com" date="1645790400">Version 1.59.0 (2022-02-24)
  Language
--------
- [Stabilize default arguments for const generics][90207]
- [Stabilize destructuring assignment][90521]
- [Relax private in public lint on generic bounds and where clauses of trait impls][90586]
- [Stabilize asm! and global_asm! for x86, x86_64, ARM, Aarch64, and RISC-V][91728]
  Compiler
--------
- [Stabilize new symbol mangling format, leaving it opt-in (-Csymbol-mangling-version=v0)][90128]
- [Emit LLVM optimization remarks when enabled with `-Cremark`][90833]
- [Fix sparc64 ABI for aggregates with floating point members][91003]
- [Warn when a `#[test]`-like built-in attribute macro is present multiple times.][91172]
- [Add support for riscv64gc-unknown-freebsd][91284]
- [Stabilize `-Z emit-future-incompat` as `--json future-incompat`][91535]
  Libraries
---------
- [Remove unnecessary bounds for some Hash{Map,Set} methods][91593]
  Stabilized APIs
- [`std::thread::available_parallelism`][available_parallelism]
- [`Result::copied`][result-copied]
- [`Result::cloned`][result-cloned]
- [`arch::asm!`][asm]
- [`arch::global_asm!`][global_asm]
- [`ops::ControlFlow::is_break`][is_break]
- [`ops::ControlFlow::is_continue`][is_continue]
- [`TryFrom&lt;char&gt; for u8`][try_from_char_u8]
- [`char::TryFromCharError`][try_from_char_err]
  implementing `Clone`, `Debug`, `Display`, `PartialEq`, `Copy`, `Eq`, `Error`
- [`iter::zip`][zip]
- [`NonZeroU8::is_power_of_two`][is_power_of_two8]
- [`NonZeroU16::is_power_of_two`][is_power_of_two16]
- [`NonZeroU32::is_power_of_two`][is_power_of_two32]
- [`NonZeroU64::is_power_of_two`][is_power_of_two64]
- [`NonZeroU128::is_power_of_two`][is_power_of_two128]
- [`DoubleEndedIterator for ToLowercase`][lowercase]
- [`DoubleEndedIterator for ToUppercase`][uppercase]
- [`TryFrom&lt;&amp;mut [T]&gt; for [T; N]`][tryfrom_ref_arr]
- [`UnwindSafe for Once`][unwindsafe_once]
- [`RefUnwindSafe for Once`][refunwindsafe_once]
- [armv8 neon intrinsics for aarch64][stdarch/1266]
  Const-stable:
- [`mem::MaybeUninit::as_ptr`][muninit_ptr]
- [`mem::MaybeUninit::assume_init`][muninit_init]
- [`mem::MaybeUninit::assume_init_ref`][muninit_init_ref]
- [`ffi::CStr::from_bytes_with_nul_unchecked`][cstr_from_bytes]
  Cargo
-----
- [Stabilize the `strip` profile option][cargo/10088]
- [Stabilize future-incompat-report][cargo/10165]
- [Support abbreviating `--release` as `-r`][cargo/10133]
- [Support `term.quiet` configuration][cargo/10152]
- [Remove `--host` from cargo {publish,search,login}][cargo/10145]
  Compatibility Notes
- [Refactor weak symbols in std::sys::unix][90846]
  This may add new, versioned, symbols when building with a newer glibc, as the
  standard library uses weak linkage rather than dynamically attempting to load
  certain symbols at runtime.
- [Deprecate crate_type and crate_name nested inside `#![cfg_attr]`][83744]
  This adds a future compatibility lint to supporting the use of cfg_attr
  wrapping either crate_type or crate_name specification within Rust files;
  it is recommended that users migrate to setting the equivalent command line
  flags.
- [Remove effect of `#[no_link]` attribute on name resolution][92034]
  This may expose new names, leading to conflicts with preexisting names in a
  given namespace and a compilation failure.
- [Cargo will document libraries before binaries.][cargo/10172]
- [Respect doc=false in dependencies, not just the root crate][cargo/10201]
- [Weaken guarantee around advancing underlying iterators in zip][83791]
- [Make split_inclusive() on an empty slice yield an empty output][89825]
- [Update std::env::temp_dir to use GetTempPath2 on Windows when available.][89999]</changelog>
  <changelog author="william.brown@suse.com" date="1646308800">- Resolve issue with multibuild test</changelog>
  <changelog author="william.brown@suse.com" date="1652270400">- bsc#1196496 - Requires gcc by default to enable linking to work correctly</changelog>
</package>
<package pkgid="6527d22992b3793584d558bf2b74f58293249ca0eb46464e6b41fa38bc405f49" name="cargo1.59" arch="x86_64">
  <version epoch="0" ver="1.59.0" rel="150300.7.7.2"/>
  <changelog author="william.brown@suse.com" date="1645790400">Version 1.59.0 (2022-02-24)
  Language
--------
- [Stabilize default arguments for const generics][90207]
- [Stabilize destructuring assignment][90521]
- [Relax private in public lint on generic bounds and where clauses of trait impls][90586]
- [Stabilize asm! and global_asm! for x86, x86_64, ARM, Aarch64, and RISC-V][91728]
  Compiler
--------
- [Stabilize new symbol mangling format, leaving it opt-in (-Csymbol-mangling-version=v0)][90128]
- [Emit LLVM optimization remarks when enabled with `-Cremark`][90833]
- [Fix sparc64 ABI for aggregates with floating point members][91003]
- [Warn when a `#[test]`-like built-in attribute macro is present multiple times.][91172]
- [Add support for riscv64gc-unknown-freebsd][91284]
- [Stabilize `-Z emit-future-incompat` as `--json future-incompat`][91535]
  Libraries
---------
- [Remove unnecessary bounds for some Hash{Map,Set} methods][91593]
  Stabilized APIs
- [`std::thread::available_parallelism`][available_parallelism]
- [`Result::copied`][result-copied]
- [`Result::cloned`][result-cloned]
- [`arch::asm!`][asm]
- [`arch::global_asm!`][global_asm]
- [`ops::ControlFlow::is_break`][is_break]
- [`ops::ControlFlow::is_continue`][is_continue]
- [`TryFrom&lt;char&gt; for u8`][try_from_char_u8]
- [`char::TryFromCharError`][try_from_char_err]
  implementing `Clone`, `Debug`, `Display`, `PartialEq`, `Copy`, `Eq`, `Error`
- [`iter::zip`][zip]
- [`NonZeroU8::is_power_of_two`][is_power_of_two8]
- [`NonZeroU16::is_power_of_two`][is_power_of_two16]
- [`NonZeroU32::is_power_of_two`][is_power_of_two32]
- [`NonZeroU64::is_power_of_two`][is_power_of_two64]
- [`NonZeroU128::is_power_of_two`][is_power_of_two128]
- [`DoubleEndedIterator for ToLowercase`][lowercase]
- [`DoubleEndedIterator for ToUppercase`][uppercase]
- [`TryFrom&lt;&amp;mut [T]&gt; for [T; N]`][tryfrom_ref_arr]
- [`UnwindSafe for Once`][unwindsafe_once]
- [`RefUnwindSafe for Once`][refunwindsafe_once]
- [armv8 neon intrinsics for aarch64][stdarch/1266]
  Const-stable:
- [`mem::MaybeUninit::as_ptr`][muninit_ptr]
- [`mem::MaybeUninit::assume_init`][muninit_init]
- [`mem::MaybeUninit::assume_init_ref`][muninit_init_ref]
- [`ffi::CStr::from_bytes_with_nul_unchecked`][cstr_from_bytes]
  Cargo
-----
- [Stabilize the `strip` profile option][cargo/10088]
- [Stabilize future-incompat-report][cargo/10165]
- [Support abbreviating `--release` as `-r`][cargo/10133]
- [Support `term.quiet` configuration][cargo/10152]
- [Remove `--host` from cargo {publish,search,login}][cargo/10145]
  Compatibility Notes
- [Refactor weak symbols in std::sys::unix][90846]
  This may add new, versioned, symbols when building with a newer glibc, as the
  standard library uses weak linkage rather than dynamically attempting to load
  certain symbols at runtime.
- [Deprecate crate_type and crate_name nested inside `#![cfg_attr]`][83744]
  This adds a future compatibility lint to supporting the use of cfg_attr
  wrapping either crate_type or crate_name specification within Rust files;
  it is recommended that users migrate to setting the equivalent command line
  flags.
- [Remove effect of `#[no_link]` attribute on name resolution][92034]
  This may expose new names, leading to conflicts with preexisting names in a
  given namespace and a compilation failure.
- [Cargo will document libraries before binaries.][cargo/10172]
- [Respect doc=false in dependencies, not just the root crate][cargo/10201]
- [Weaken guarantee around advancing underlying iterators in zip][83791]
- [Make split_inclusive() on an empty slice yield an empty output][89825]
- [Update std::env::temp_dir to use GetTempPath2 on Windows when available.][89999]</changelog>
  <changelog author="william.brown@suse.com" date="1646308800">- Resolve issue with multibuild test</changelog>
  <changelog author="william.brown@suse.com" date="1652270400">- bsc#1196496 - Requires gcc by default to enable linking to work correctly</changelog>
</package>
<package pkgid="bcb16f87c5e145ef0fa43c95b3a71c74d65e4c44af915283413e24baf3c3ff0e" name="cargo1.60" arch="aarch64">
  <version epoch="0" ver="1.60.0" rel="150300.7.6.1"/>
  <changelog author="william.brown@suse.com" date="1649419200">Version 1.60.0 (2022-04-07)
  Language
--------
- [Stabilize `#[cfg(panic = "...")]` for either `"unwind"` or `"abort"`.][93658]
- [Stabilize `#[cfg(target_has_atomic = "...")]` for each integer size and `"ptr"`.][93824]
  Compiler
--------
- [Enable combining `+crt-static` and `relocation-model=pic` on `x86_64-unknown-linux-gnu`][86374]
- [Fixes wrong `unreachable_pub` lints on nested and glob public reexport][87487]
- [Stabilize `-Z instrument-coverage` as `-C instrument-coverage`][90132]
- [Stabilize `-Z print-link-args` as `--print link-args`][91606]
- [Add new Tier 3 target `mips64-openwrt-linux-musl`\*][92300]
- [Add new Tier 3 target `armv7-unknown-linux-uclibceabi` (softfloat)\*][92383]
- [Fix invalid removal of newlines from doc comments][92357]
- [Add kernel target for RustyHermit][92670]
- [Deny mixing bin crate type with lib crate types][92933]
- [Make rustc use `RUST_BACKTRACE=full` by default][93566]
- [Upgrade to LLVM 14][93577]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Guarantee call order for `sort_by_cached_key`][89621]
- [Improve `Duration::try_from_secs_f32`/`f64` accuracy by directly processing exponent and mantissa][90247]
- [Make `Instant::{duration_since, elapsed, sub}` saturating][89926]
- [Remove non-monotonic clocks workarounds in `Instant::now`][89926]
- [Make `BuildHasherDefault`, `iter::Empty` and `future::Pending` covariant][92630]
  Stabilized APIs
- [`Arc::new_cyclic`][arc_new_cyclic]
- [`Rc::new_cyclic`][rc_new_cyclic]
- [`slice::EscapeAscii`][slice_escape_ascii]
- [`&lt;[u8]&gt;::escape_ascii`][slice_u8_escape_ascii]
- [`u8::escape_ascii`][u8_escape_ascii]
- [`Vec::spare_capacity_mut`][vec_spare_capacity_mut]
- [`MaybeUninit::assume_init_drop`][assume_init_drop]
- [`MaybeUninit::assume_init_read`][assume_init_read]
- [`i8::abs_diff`][i8_abs_diff]
- [`i16::abs_diff`][i16_abs_diff]
- [`i32::abs_diff`][i32_abs_diff]
- [`i64::abs_diff`][i64_abs_diff]
- [`i128::abs_diff`][i128_abs_diff]
- [`isize::abs_diff`][isize_abs_diff]
- [`u8::abs_diff`][u8_abs_diff]
- [`u16::abs_diff`][u16_abs_diff]
- [`u32::abs_diff`][u32_abs_diff]
- [`u64::abs_diff`][u64_abs_diff]
- [`u128::abs_diff`][u128_abs_diff]
- [`usize::abs_diff`][usize_abs_diff]
- [`Display for io::ErrorKind`][display_error_kind]
- [`From&lt;u8&gt; for ExitCode`][from_u8_exit_code]
- [`Not for !` (the "never" type)][not_never]
- [_Op_`Assign&lt;$t&gt; for Wrapping&lt;$t&gt;`][wrapping_assign_ops]
- [`arch::is_aarch64_feature_detected!`][is_aarch64_feature_detected]
  Cargo
-----
- [Port cargo from `toml-rs` to `toml_edit`][cargo/10086]
- [Stabilize `-Ztimings` as `--timings`][cargo/10245]
- [Stabilize namespaced and weak dependency features.][cargo/10269]
- [Accept more `cargo:rustc-link-arg-*` types from build script output.][cargo/10274]
- [cargo-new should not add ignore rule on Cargo.lock inside subdirs][cargo/10379]
  Misc
----
- [Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs][92800]
- [Drop rustc-docs from complete profile][93742]
- [bootstrap: tidy up flag handling for llvm build][93918]
  Compatibility Notes
- [Remove compiler-rt linking hack on Android][83822]
- [Mitigations for platforms with non-monotonic clocks have been removed from
  `Instant::now`][89926]. On platforms that don't provide monotonic clocks, an
  instant is not guaranteed to be greater than an earlier instant anymore.
- [`Instant::{duration_since, elapsed, sub}` do not panic anymore on underflow,
  saturating to `0` instead][89926]. In the real world the panic happened mostly
  on platforms with buggy monotonic clock implementations rather than catching
  programming errors like reversing the start and end times. Such programming
  errors will now results in `0` rather than a panic.
- In a future release we're planning to increase the baseline requirements for
  the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love
  your feedback in [PR #95026][95026].</changelog>
  <changelog author="william.brown@suse.com" date="1651060800">- Increase builder disk constraint</changelog>
  <changelog author="william.brown@suse.com" date="1652097600">- bsc#1199126 - resolve issue with rpath being embedded into rust-lld
- Support changing gcc version for leap/sle</changelog>
</package>
<package pkgid="f705ce363aa7714778921a76613249500f39e250b3f71f97c4dab76c658ffbc7" name="cargo1.60" arch="ppc64le">
  <version epoch="0" ver="1.60.0" rel="150300.7.6.1"/>
  <changelog author="william.brown@suse.com" date="1649419200">Version 1.60.0 (2022-04-07)
  Language
--------
- [Stabilize `#[cfg(panic = "...")]` for either `"unwind"` or `"abort"`.][93658]
- [Stabilize `#[cfg(target_has_atomic = "...")]` for each integer size and `"ptr"`.][93824]
  Compiler
--------
- [Enable combining `+crt-static` and `relocation-model=pic` on `x86_64-unknown-linux-gnu`][86374]
- [Fixes wrong `unreachable_pub` lints on nested and glob public reexport][87487]
- [Stabilize `-Z instrument-coverage` as `-C instrument-coverage`][90132]
- [Stabilize `-Z print-link-args` as `--print link-args`][91606]
- [Add new Tier 3 target `mips64-openwrt-linux-musl`\*][92300]
- [Add new Tier 3 target `armv7-unknown-linux-uclibceabi` (softfloat)\*][92383]
- [Fix invalid removal of newlines from doc comments][92357]
- [Add kernel target for RustyHermit][92670]
- [Deny mixing bin crate type with lib crate types][92933]
- [Make rustc use `RUST_BACKTRACE=full` by default][93566]
- [Upgrade to LLVM 14][93577]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Guarantee call order for `sort_by_cached_key`][89621]
- [Improve `Duration::try_from_secs_f32`/`f64` accuracy by directly processing exponent and mantissa][90247]
- [Make `Instant::{duration_since, elapsed, sub}` saturating][89926]
- [Remove non-monotonic clocks workarounds in `Instant::now`][89926]
- [Make `BuildHasherDefault`, `iter::Empty` and `future::Pending` covariant][92630]
  Stabilized APIs
- [`Arc::new_cyclic`][arc_new_cyclic]
- [`Rc::new_cyclic`][rc_new_cyclic]
- [`slice::EscapeAscii`][slice_escape_ascii]
- [`&lt;[u8]&gt;::escape_ascii`][slice_u8_escape_ascii]
- [`u8::escape_ascii`][u8_escape_ascii]
- [`Vec::spare_capacity_mut`][vec_spare_capacity_mut]
- [`MaybeUninit::assume_init_drop`][assume_init_drop]
- [`MaybeUninit::assume_init_read`][assume_init_read]
- [`i8::abs_diff`][i8_abs_diff]
- [`i16::abs_diff`][i16_abs_diff]
- [`i32::abs_diff`][i32_abs_diff]
- [`i64::abs_diff`][i64_abs_diff]
- [`i128::abs_diff`][i128_abs_diff]
- [`isize::abs_diff`][isize_abs_diff]
- [`u8::abs_diff`][u8_abs_diff]
- [`u16::abs_diff`][u16_abs_diff]
- [`u32::abs_diff`][u32_abs_diff]
- [`u64::abs_diff`][u64_abs_diff]
- [`u128::abs_diff`][u128_abs_diff]
- [`usize::abs_diff`][usize_abs_diff]
- [`Display for io::ErrorKind`][display_error_kind]
- [`From&lt;u8&gt; for ExitCode`][from_u8_exit_code]
- [`Not for !` (the "never" type)][not_never]
- [_Op_`Assign&lt;$t&gt; for Wrapping&lt;$t&gt;`][wrapping_assign_ops]
- [`arch::is_aarch64_feature_detected!`][is_aarch64_feature_detected]
  Cargo
-----
- [Port cargo from `toml-rs` to `toml_edit`][cargo/10086]
- [Stabilize `-Ztimings` as `--timings`][cargo/10245]
- [Stabilize namespaced and weak dependency features.][cargo/10269]
- [Accept more `cargo:rustc-link-arg-*` types from build script output.][cargo/10274]
- [cargo-new should not add ignore rule on Cargo.lock inside subdirs][cargo/10379]
  Misc
----
- [Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs][92800]
- [Drop rustc-docs from complete profile][93742]
- [bootstrap: tidy up flag handling for llvm build][93918]
  Compatibility Notes
- [Remove compiler-rt linking hack on Android][83822]
- [Mitigations for platforms with non-monotonic clocks have been removed from
  `Instant::now`][89926]. On platforms that don't provide monotonic clocks, an
  instant is not guaranteed to be greater than an earlier instant anymore.
- [`Instant::{duration_since, elapsed, sub}` do not panic anymore on underflow,
  saturating to `0` instead][89926]. In the real world the panic happened mostly
  on platforms with buggy monotonic clock implementations rather than catching
  programming errors like reversing the start and end times. Such programming
  errors will now results in `0` rather than a panic.
- In a future release we're planning to increase the baseline requirements for
  the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love
  your feedback in [PR #95026][95026].</changelog>
  <changelog author="william.brown@suse.com" date="1651060800">- Increase builder disk constraint</changelog>
  <changelog author="william.brown@suse.com" date="1652097600">- bsc#1199126 - resolve issue with rpath being embedded into rust-lld
- Support changing gcc version for leap/sle</changelog>
</package>
<package pkgid="cd472dd304615c7cfb0ef323ad98e5624f2eb2f8e2f3050d4b30852cc4b22239" name="cargo1.60" arch="s390x">
  <version epoch="0" ver="1.60.0" rel="150300.7.6.1"/>
  <changelog author="william.brown@suse.com" date="1649419200">Version 1.60.0 (2022-04-07)
  Language
--------
- [Stabilize `#[cfg(panic = "...")]` for either `"unwind"` or `"abort"`.][93658]
- [Stabilize `#[cfg(target_has_atomic = "...")]` for each integer size and `"ptr"`.][93824]
  Compiler
--------
- [Enable combining `+crt-static` and `relocation-model=pic` on `x86_64-unknown-linux-gnu`][86374]
- [Fixes wrong `unreachable_pub` lints on nested and glob public reexport][87487]
- [Stabilize `-Z instrument-coverage` as `-C instrument-coverage`][90132]
- [Stabilize `-Z print-link-args` as `--print link-args`][91606]
- [Add new Tier 3 target `mips64-openwrt-linux-musl`\*][92300]
- [Add new Tier 3 target `armv7-unknown-linux-uclibceabi` (softfloat)\*][92383]
- [Fix invalid removal of newlines from doc comments][92357]
- [Add kernel target for RustyHermit][92670]
- [Deny mixing bin crate type with lib crate types][92933]
- [Make rustc use `RUST_BACKTRACE=full` by default][93566]
- [Upgrade to LLVM 14][93577]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Guarantee call order for `sort_by_cached_key`][89621]
- [Improve `Duration::try_from_secs_f32`/`f64` accuracy by directly processing exponent and mantissa][90247]
- [Make `Instant::{duration_since, elapsed, sub}` saturating][89926]
- [Remove non-monotonic clocks workarounds in `Instant::now`][89926]
- [Make `BuildHasherDefault`, `iter::Empty` and `future::Pending` covariant][92630]
  Stabilized APIs
- [`Arc::new_cyclic`][arc_new_cyclic]
- [`Rc::new_cyclic`][rc_new_cyclic]
- [`slice::EscapeAscii`][slice_escape_ascii]
- [`&lt;[u8]&gt;::escape_ascii`][slice_u8_escape_ascii]
- [`u8::escape_ascii`][u8_escape_ascii]
- [`Vec::spare_capacity_mut`][vec_spare_capacity_mut]
- [`MaybeUninit::assume_init_drop`][assume_init_drop]
- [`MaybeUninit::assume_init_read`][assume_init_read]
- [`i8::abs_diff`][i8_abs_diff]
- [`i16::abs_diff`][i16_abs_diff]
- [`i32::abs_diff`][i32_abs_diff]
- [`i64::abs_diff`][i64_abs_diff]
- [`i128::abs_diff`][i128_abs_diff]
- [`isize::abs_diff`][isize_abs_diff]
- [`u8::abs_diff`][u8_abs_diff]
- [`u16::abs_diff`][u16_abs_diff]
- [`u32::abs_diff`][u32_abs_diff]
- [`u64::abs_diff`][u64_abs_diff]
- [`u128::abs_diff`][u128_abs_diff]
- [`usize::abs_diff`][usize_abs_diff]
- [`Display for io::ErrorKind`][display_error_kind]
- [`From&lt;u8&gt; for ExitCode`][from_u8_exit_code]
- [`Not for !` (the "never" type)][not_never]
- [_Op_`Assign&lt;$t&gt; for Wrapping&lt;$t&gt;`][wrapping_assign_ops]
- [`arch::is_aarch64_feature_detected!`][is_aarch64_feature_detected]
  Cargo
-----
- [Port cargo from `toml-rs` to `toml_edit`][cargo/10086]
- [Stabilize `-Ztimings` as `--timings`][cargo/10245]
- [Stabilize namespaced and weak dependency features.][cargo/10269]
- [Accept more `cargo:rustc-link-arg-*` types from build script output.][cargo/10274]
- [cargo-new should not add ignore rule on Cargo.lock inside subdirs][cargo/10379]
  Misc
----
- [Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs][92800]
- [Drop rustc-docs from complete profile][93742]
- [bootstrap: tidy up flag handling for llvm build][93918]
  Compatibility Notes
- [Remove compiler-rt linking hack on Android][83822]
- [Mitigations for platforms with non-monotonic clocks have been removed from
  `Instant::now`][89926]. On platforms that don't provide monotonic clocks, an
  instant is not guaranteed to be greater than an earlier instant anymore.
- [`Instant::{duration_since, elapsed, sub}` do not panic anymore on underflow,
  saturating to `0` instead][89926]. In the real world the panic happened mostly
  on platforms with buggy monotonic clock implementations rather than catching
  programming errors like reversing the start and end times. Such programming
  errors will now results in `0` rather than a panic.
- In a future release we're planning to increase the baseline requirements for
  the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love
  your feedback in [PR #95026][95026].</changelog>
  <changelog author="william.brown@suse.com" date="1651060800">- Increase builder disk constraint</changelog>
  <changelog author="william.brown@suse.com" date="1652097600">- bsc#1199126 - resolve issue with rpath being embedded into rust-lld
- Support changing gcc version for leap/sle</changelog>
</package>
<package pkgid="65824d6ccda37489621ca7fa298bc75944693c43a320ac3256b52d1b8f33c7ab" name="cargo1.60" arch="x86_64">
  <version epoch="0" ver="1.60.0" rel="150300.7.6.1"/>
  <changelog author="william.brown@suse.com" date="1649419200">Version 1.60.0 (2022-04-07)
  Language
--------
- [Stabilize `#[cfg(panic = "...")]` for either `"unwind"` or `"abort"`.][93658]
- [Stabilize `#[cfg(target_has_atomic = "...")]` for each integer size and `"ptr"`.][93824]
  Compiler
--------
- [Enable combining `+crt-static` and `relocation-model=pic` on `x86_64-unknown-linux-gnu`][86374]
- [Fixes wrong `unreachable_pub` lints on nested and glob public reexport][87487]
- [Stabilize `-Z instrument-coverage` as `-C instrument-coverage`][90132]
- [Stabilize `-Z print-link-args` as `--print link-args`][91606]
- [Add new Tier 3 target `mips64-openwrt-linux-musl`\*][92300]
- [Add new Tier 3 target `armv7-unknown-linux-uclibceabi` (softfloat)\*][92383]
- [Fix invalid removal of newlines from doc comments][92357]
- [Add kernel target for RustyHermit][92670]
- [Deny mixing bin crate type with lib crate types][92933]
- [Make rustc use `RUST_BACKTRACE=full` by default][93566]
- [Upgrade to LLVM 14][93577]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Guarantee call order for `sort_by_cached_key`][89621]
- [Improve `Duration::try_from_secs_f32`/`f64` accuracy by directly processing exponent and mantissa][90247]
- [Make `Instant::{duration_since, elapsed, sub}` saturating][89926]
- [Remove non-monotonic clocks workarounds in `Instant::now`][89926]
- [Make `BuildHasherDefault`, `iter::Empty` and `future::Pending` covariant][92630]
  Stabilized APIs
- [`Arc::new_cyclic`][arc_new_cyclic]
- [`Rc::new_cyclic`][rc_new_cyclic]
- [`slice::EscapeAscii`][slice_escape_ascii]
- [`&lt;[u8]&gt;::escape_ascii`][slice_u8_escape_ascii]
- [`u8::escape_ascii`][u8_escape_ascii]
- [`Vec::spare_capacity_mut`][vec_spare_capacity_mut]
- [`MaybeUninit::assume_init_drop`][assume_init_drop]
- [`MaybeUninit::assume_init_read`][assume_init_read]
- [`i8::abs_diff`][i8_abs_diff]
- [`i16::abs_diff`][i16_abs_diff]
- [`i32::abs_diff`][i32_abs_diff]
- [`i64::abs_diff`][i64_abs_diff]
- [`i128::abs_diff`][i128_abs_diff]
- [`isize::abs_diff`][isize_abs_diff]
- [`u8::abs_diff`][u8_abs_diff]
- [`u16::abs_diff`][u16_abs_diff]
- [`u32::abs_diff`][u32_abs_diff]
- [`u64::abs_diff`][u64_abs_diff]
- [`u128::abs_diff`][u128_abs_diff]
- [`usize::abs_diff`][usize_abs_diff]
- [`Display for io::ErrorKind`][display_error_kind]
- [`From&lt;u8&gt; for ExitCode`][from_u8_exit_code]
- [`Not for !` (the "never" type)][not_never]
- [_Op_`Assign&lt;$t&gt; for Wrapping&lt;$t&gt;`][wrapping_assign_ops]
- [`arch::is_aarch64_feature_detected!`][is_aarch64_feature_detected]
  Cargo
-----
- [Port cargo from `toml-rs` to `toml_edit`][cargo/10086]
- [Stabilize `-Ztimings` as `--timings`][cargo/10245]
- [Stabilize namespaced and weak dependency features.][cargo/10269]
- [Accept more `cargo:rustc-link-arg-*` types from build script output.][cargo/10274]
- [cargo-new should not add ignore rule on Cargo.lock inside subdirs][cargo/10379]
  Misc
----
- [Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs][92800]
- [Drop rustc-docs from complete profile][93742]
- [bootstrap: tidy up flag handling for llvm build][93918]
  Compatibility Notes
- [Remove compiler-rt linking hack on Android][83822]
- [Mitigations for platforms with non-monotonic clocks have been removed from
  `Instant::now`][89926]. On platforms that don't provide monotonic clocks, an
  instant is not guaranteed to be greater than an earlier instant anymore.
- [`Instant::{duration_since, elapsed, sub}` do not panic anymore on underflow,
  saturating to `0` instead][89926]. In the real world the panic happened mostly
  on platforms with buggy monotonic clock implementations rather than catching
  programming errors like reversing the start and end times. Such programming
  errors will now results in `0` rather than a panic.
- In a future release we're planning to increase the baseline requirements for
  the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love
  your feedback in [PR #95026][95026].</changelog>
  <changelog author="william.brown@suse.com" date="1651060800">- Increase builder disk constraint</changelog>
  <changelog author="william.brown@suse.com" date="1652097600">- bsc#1199126 - resolve issue with rpath being embedded into rust-lld
- Support changing gcc version for leap/sle</changelog>
</package>
<package pkgid="604bf0b83e5fe571e7ba4c61f863178537d24725797b5270c7e3fa8e95d4a3ae" name="cargo1.61" arch="aarch64">
  <version epoch="0" ver="1.61.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">Version 1.61.0 (2022-05-19)
  Language
--------
- [`const fn` signatures can now include generic trait bounds][93827]
- [`const fn` signatures can now use `impl Trait` in argument and return position][93827]
- [Function pointers can now be created, cast, and passed around in a `const fn`][93827]
- [Recursive calls can now set the value of a function's opaque `impl Trait` return type][94081]
  Compiler
--------
- [Linking modifier syntax in `#[link]` attributes and on the command line, as well as the `whole-archive` modifier specifically, are now supported][93901]
- [The `char` type is now described as UTF-32 in debuginfo][89887]
- The [`#[target_feature]`][target_feature] attribute [can now be used with aarch64 features][90621]
- X86 [`#[target_feature = "adx"]` is now stable][93745]
  Libraries
---------
- [`ManuallyDrop&lt;T&gt;` is now documented to have the same layout as `T`][88375]
- [`#[ignore = "?"]` messages are printed when running tests][92714]
- [Consistently show absent stdio handles on Windows as NULL handles][93263]
- [Make `std::io::stdio::lock()` return `'static` handles.][93965] Previously, the creation of locked handles to stdin/stdout/stderr would borrow the handles being locked, which prevented writing `let out = std::io::stdout().lock();` because `out` would outlive the return value of `stdout()`. Such code now works, eliminating a common pitfall that affected many Rust users.
- [`Vec::from_raw_parts` is now less restrictive about its inputs][95016]
- [`std::thread::available_parallelism` now takes cgroup quotas into account.][92697] Since `available_parallelism` is often used to create a thread pool for parallel computation, which may be CPU-bound for performance, `available_parallelism` will return a value consistent with the ability to use that many threads continuously, if possible. For instance, in a container with 8 virtual CPUs but quotas only allowing for 50% usage, `available_parallelism` will return 4.
  Stabilized APIs
- [`Pin::static_mut`]
- [`Pin::static_ref`]
- [`Vec::retain_mut`]
- [`VecDeque::retain_mut`]
- [`Write` for `Cursor&lt;[u8; N]&gt;`][cursor-write-array]
- [`std::os::unix::net::SocketAddr::from_pathname`]
- [`std::process::ExitCode`] and [`std::process::Termination`]. The stabilization of these two APIs now makes it possible for programs to return errors from `main` with custom exit codes.
- [`std::thread::JoinHandle::is_finished`]
  These APIs are now usable in const contexts:
- [`&lt;*const T&gt;::offset` and `&lt;*mut T&gt;::offset`][ptr-offset]
- [`&lt;*const T&gt;::wrapping_offset` and `&lt;*mut T&gt;::wrapping_offset`][ptr-wrapping_offset]
- [`&lt;*const T&gt;::add` and `&lt;*mut T&gt;::add`][ptr-add]
- [`&lt;*const T&gt;::sub` and `&lt;*mut T&gt;::sub`][ptr-sub]
- [`&lt;*const T&gt;::wrapping_add` and `&lt;*mut T&gt;::wrapping_add`][ptr-wrapping_add]
- [`&lt;*const T&gt;::wrapping_sub` and `&lt;*mut T&gt;::wrapping_sub`][ptr-wrapping_sub]
- [`&lt;[T]&gt;::as_mut_ptr`][slice-as_mut_ptr]
- [`&lt;[T]&gt;::as_ptr_range`][slice-as_ptr_range]
- [`&lt;[T]&gt;::as_mut_ptr_range`][slice-as_mut_ptr_range]
  Cargo
-----
  No feature changes, but see compatibility notes.
  Compatibility Notes
- Previously native static libraries were linked as `whole-archive` in some cases, but now rustc tries not to use `whole-archive` unless explicitly requested. This [change][93901] may result in linking errors in some cases. To fix such errors, native libraries linked from the command line, build scripts, or [`#[link]` attributes][link-attr] need to
  - (more common) either be reordered to respect dependencies between them (if `a` depends on `b` then `a` should go first and `b` second)
  - (less common) or be updated to use the [`+whole-archive`] modifier.
- [Catching a second unwind from FFI code while cleaning up from a Rust panic now causes the process to abort][92911]
- [Proc macros no longer see `ident` matchers wrapped in groups][92472]
- [The number of `#` in `r#` raw string literals is now required to be less than 256][95251]
- [When checking that a dyn type satisfies a trait bound, supertrait bounds are now enforced][92285]
- [`cargo vendor` now only accepts one value for each `--sync` flag][cargo/10448]
- [`cfg` predicates in `all()` and `any()` are always evaluated to detect errors, instead of short-circuiting.][94295] The compatibility considerations here arise in nightly-only code that used the short-circuiting behavior of `all` to write something like `cfg(all(feature = "nightly", syntax-requiring-nightly))`, which will now fail to compile. Instead, use either `cfg_attr(feature = "nightly", ...)` or nested uses of `cfg`.
- [bootstrap: static-libstdcpp is now enabled by default, and can now be disabled when llvm-tools is enabled][94832]</changelog>
  <changelog author="william.brown@suse.com" date="1654171200">- Correct issue with linker that caused build ids to be invalid</changelog>
</package>
<package pkgid="5fd2e84a531858f5f22c1bbc72d6cf9e8bcd8c216278933667d8afce87ea4401" name="cargo1.61" arch="ppc64le">
  <version epoch="0" ver="1.61.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">Version 1.61.0 (2022-05-19)
  Language
--------
- [`const fn` signatures can now include generic trait bounds][93827]
- [`const fn` signatures can now use `impl Trait` in argument and return position][93827]
- [Function pointers can now be created, cast, and passed around in a `const fn`][93827]
- [Recursive calls can now set the value of a function's opaque `impl Trait` return type][94081]
  Compiler
--------
- [Linking modifier syntax in `#[link]` attributes and on the command line, as well as the `whole-archive` modifier specifically, are now supported][93901]
- [The `char` type is now described as UTF-32 in debuginfo][89887]
- The [`#[target_feature]`][target_feature] attribute [can now be used with aarch64 features][90621]
- X86 [`#[target_feature = "adx"]` is now stable][93745]
  Libraries
---------
- [`ManuallyDrop&lt;T&gt;` is now documented to have the same layout as `T`][88375]
- [`#[ignore = "?"]` messages are printed when running tests][92714]
- [Consistently show absent stdio handles on Windows as NULL handles][93263]
- [Make `std::io::stdio::lock()` return `'static` handles.][93965] Previously, the creation of locked handles to stdin/stdout/stderr would borrow the handles being locked, which prevented writing `let out = std::io::stdout().lock();` because `out` would outlive the return value of `stdout()`. Such code now works, eliminating a common pitfall that affected many Rust users.
- [`Vec::from_raw_parts` is now less restrictive about its inputs][95016]
- [`std::thread::available_parallelism` now takes cgroup quotas into account.][92697] Since `available_parallelism` is often used to create a thread pool for parallel computation, which may be CPU-bound for performance, `available_parallelism` will return a value consistent with the ability to use that many threads continuously, if possible. For instance, in a container with 8 virtual CPUs but quotas only allowing for 50% usage, `available_parallelism` will return 4.
  Stabilized APIs
- [`Pin::static_mut`]
- [`Pin::static_ref`]
- [`Vec::retain_mut`]
- [`VecDeque::retain_mut`]
- [`Write` for `Cursor&lt;[u8; N]&gt;`][cursor-write-array]
- [`std::os::unix::net::SocketAddr::from_pathname`]
- [`std::process::ExitCode`] and [`std::process::Termination`]. The stabilization of these two APIs now makes it possible for programs to return errors from `main` with custom exit codes.
- [`std::thread::JoinHandle::is_finished`]
  These APIs are now usable in const contexts:
- [`&lt;*const T&gt;::offset` and `&lt;*mut T&gt;::offset`][ptr-offset]
- [`&lt;*const T&gt;::wrapping_offset` and `&lt;*mut T&gt;::wrapping_offset`][ptr-wrapping_offset]
- [`&lt;*const T&gt;::add` and `&lt;*mut T&gt;::add`][ptr-add]
- [`&lt;*const T&gt;::sub` and `&lt;*mut T&gt;::sub`][ptr-sub]
- [`&lt;*const T&gt;::wrapping_add` and `&lt;*mut T&gt;::wrapping_add`][ptr-wrapping_add]
- [`&lt;*const T&gt;::wrapping_sub` and `&lt;*mut T&gt;::wrapping_sub`][ptr-wrapping_sub]
- [`&lt;[T]&gt;::as_mut_ptr`][slice-as_mut_ptr]
- [`&lt;[T]&gt;::as_ptr_range`][slice-as_ptr_range]
- [`&lt;[T]&gt;::as_mut_ptr_range`][slice-as_mut_ptr_range]
  Cargo
-----
  No feature changes, but see compatibility notes.
  Compatibility Notes
- Previously native static libraries were linked as `whole-archive` in some cases, but now rustc tries not to use `whole-archive` unless explicitly requested. This [change][93901] may result in linking errors in some cases. To fix such errors, native libraries linked from the command line, build scripts, or [`#[link]` attributes][link-attr] need to
  - (more common) either be reordered to respect dependencies between them (if `a` depends on `b` then `a` should go first and `b` second)
  - (less common) or be updated to use the [`+whole-archive`] modifier.
- [Catching a second unwind from FFI code while cleaning up from a Rust panic now causes the process to abort][92911]
- [Proc macros no longer see `ident` matchers wrapped in groups][92472]
- [The number of `#` in `r#` raw string literals is now required to be less than 256][95251]
- [When checking that a dyn type satisfies a trait bound, supertrait bounds are now enforced][92285]
- [`cargo vendor` now only accepts one value for each `--sync` flag][cargo/10448]
- [`cfg` predicates in `all()` and `any()` are always evaluated to detect errors, instead of short-circuiting.][94295] The compatibility considerations here arise in nightly-only code that used the short-circuiting behavior of `all` to write something like `cfg(all(feature = "nightly", syntax-requiring-nightly))`, which will now fail to compile. Instead, use either `cfg_attr(feature = "nightly", ...)` or nested uses of `cfg`.
- [bootstrap: static-libstdcpp is now enabled by default, and can now be disabled when llvm-tools is enabled][94832]</changelog>
  <changelog author="william.brown@suse.com" date="1654171200">- Correct issue with linker that caused build ids to be invalid</changelog>
</package>
<package pkgid="e0bd77aad7a3d963003fe9ed191b17ef6d0d38406550681d093b2fed75f158e3" name="cargo1.61" arch="s390x">
  <version epoch="0" ver="1.61.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">Version 1.61.0 (2022-05-19)
  Language
--------
- [`const fn` signatures can now include generic trait bounds][93827]
- [`const fn` signatures can now use `impl Trait` in argument and return position][93827]
- [Function pointers can now be created, cast, and passed around in a `const fn`][93827]
- [Recursive calls can now set the value of a function's opaque `impl Trait` return type][94081]
  Compiler
--------
- [Linking modifier syntax in `#[link]` attributes and on the command line, as well as the `whole-archive` modifier specifically, are now supported][93901]
- [The `char` type is now described as UTF-32 in debuginfo][89887]
- The [`#[target_feature]`][target_feature] attribute [can now be used with aarch64 features][90621]
- X86 [`#[target_feature = "adx"]` is now stable][93745]
  Libraries
---------
- [`ManuallyDrop&lt;T&gt;` is now documented to have the same layout as `T`][88375]
- [`#[ignore = "?"]` messages are printed when running tests][92714]
- [Consistently show absent stdio handles on Windows as NULL handles][93263]
- [Make `std::io::stdio::lock()` return `'static` handles.][93965] Previously, the creation of locked handles to stdin/stdout/stderr would borrow the handles being locked, which prevented writing `let out = std::io::stdout().lock();` because `out` would outlive the return value of `stdout()`. Such code now works, eliminating a common pitfall that affected many Rust users.
- [`Vec::from_raw_parts` is now less restrictive about its inputs][95016]
- [`std::thread::available_parallelism` now takes cgroup quotas into account.][92697] Since `available_parallelism` is often used to create a thread pool for parallel computation, which may be CPU-bound for performance, `available_parallelism` will return a value consistent with the ability to use that many threads continuously, if possible. For instance, in a container with 8 virtual CPUs but quotas only allowing for 50% usage, `available_parallelism` will return 4.
  Stabilized APIs
- [`Pin::static_mut`]
- [`Pin::static_ref`]
- [`Vec::retain_mut`]
- [`VecDeque::retain_mut`]
- [`Write` for `Cursor&lt;[u8; N]&gt;`][cursor-write-array]
- [`std::os::unix::net::SocketAddr::from_pathname`]
- [`std::process::ExitCode`] and [`std::process::Termination`]. The stabilization of these two APIs now makes it possible for programs to return errors from `main` with custom exit codes.
- [`std::thread::JoinHandle::is_finished`]
  These APIs are now usable in const contexts:
- [`&lt;*const T&gt;::offset` and `&lt;*mut T&gt;::offset`][ptr-offset]
- [`&lt;*const T&gt;::wrapping_offset` and `&lt;*mut T&gt;::wrapping_offset`][ptr-wrapping_offset]
- [`&lt;*const T&gt;::add` and `&lt;*mut T&gt;::add`][ptr-add]
- [`&lt;*const T&gt;::sub` and `&lt;*mut T&gt;::sub`][ptr-sub]
- [`&lt;*const T&gt;::wrapping_add` and `&lt;*mut T&gt;::wrapping_add`][ptr-wrapping_add]
- [`&lt;*const T&gt;::wrapping_sub` and `&lt;*mut T&gt;::wrapping_sub`][ptr-wrapping_sub]
- [`&lt;[T]&gt;::as_mut_ptr`][slice-as_mut_ptr]
- [`&lt;[T]&gt;::as_ptr_range`][slice-as_ptr_range]
- [`&lt;[T]&gt;::as_mut_ptr_range`][slice-as_mut_ptr_range]
  Cargo
-----
  No feature changes, but see compatibility notes.
  Compatibility Notes
- Previously native static libraries were linked as `whole-archive` in some cases, but now rustc tries not to use `whole-archive` unless explicitly requested. This [change][93901] may result in linking errors in some cases. To fix such errors, native libraries linked from the command line, build scripts, or [`#[link]` attributes][link-attr] need to
  - (more common) either be reordered to respect dependencies between them (if `a` depends on `b` then `a` should go first and `b` second)
  - (less common) or be updated to use the [`+whole-archive`] modifier.
- [Catching a second unwind from FFI code while cleaning up from a Rust panic now causes the process to abort][92911]
- [Proc macros no longer see `ident` matchers wrapped in groups][92472]
- [The number of `#` in `r#` raw string literals is now required to be less than 256][95251]
- [When checking that a dyn type satisfies a trait bound, supertrait bounds are now enforced][92285]
- [`cargo vendor` now only accepts one value for each `--sync` flag][cargo/10448]
- [`cfg` predicates in `all()` and `any()` are always evaluated to detect errors, instead of short-circuiting.][94295] The compatibility considerations here arise in nightly-only code that used the short-circuiting behavior of `all` to write something like `cfg(all(feature = "nightly", syntax-requiring-nightly))`, which will now fail to compile. Instead, use either `cfg_attr(feature = "nightly", ...)` or nested uses of `cfg`.
- [bootstrap: static-libstdcpp is now enabled by default, and can now be disabled when llvm-tools is enabled][94832]</changelog>
  <changelog author="william.brown@suse.com" date="1654171200">- Correct issue with linker that caused build ids to be invalid</changelog>
</package>
<package pkgid="aef8be83e981b3e032a0e93f33a0270acaa2e476b7818e2bbfc5261f1ef6bad8" name="cargo1.61" arch="x86_64">
  <version epoch="0" ver="1.61.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1653048000">Version 1.61.0 (2022-05-19)
  Language
--------
- [`const fn` signatures can now include generic trait bounds][93827]
- [`const fn` signatures can now use `impl Trait` in argument and return position][93827]
- [Function pointers can now be created, cast, and passed around in a `const fn`][93827]
- [Recursive calls can now set the value of a function's opaque `impl Trait` return type][94081]
  Compiler
--------
- [Linking modifier syntax in `#[link]` attributes and on the command line, as well as the `whole-archive` modifier specifically, are now supported][93901]
- [The `char` type is now described as UTF-32 in debuginfo][89887]
- The [`#[target_feature]`][target_feature] attribute [can now be used with aarch64 features][90621]
- X86 [`#[target_feature = "adx"]` is now stable][93745]
  Libraries
---------
- [`ManuallyDrop&lt;T&gt;` is now documented to have the same layout as `T`][88375]
- [`#[ignore = "?"]` messages are printed when running tests][92714]
- [Consistently show absent stdio handles on Windows as NULL handles][93263]
- [Make `std::io::stdio::lock()` return `'static` handles.][93965] Previously, the creation of locked handles to stdin/stdout/stderr would borrow the handles being locked, which prevented writing `let out = std::io::stdout().lock();` because `out` would outlive the return value of `stdout()`. Such code now works, eliminating a common pitfall that affected many Rust users.
- [`Vec::from_raw_parts` is now less restrictive about its inputs][95016]
- [`std::thread::available_parallelism` now takes cgroup quotas into account.][92697] Since `available_parallelism` is often used to create a thread pool for parallel computation, which may be CPU-bound for performance, `available_parallelism` will return a value consistent with the ability to use that many threads continuously, if possible. For instance, in a container with 8 virtual CPUs but quotas only allowing for 50% usage, `available_parallelism` will return 4.
  Stabilized APIs
- [`Pin::static_mut`]
- [`Pin::static_ref`]
- [`Vec::retain_mut`]
- [`VecDeque::retain_mut`]
- [`Write` for `Cursor&lt;[u8; N]&gt;`][cursor-write-array]
- [`std::os::unix::net::SocketAddr::from_pathname`]
- [`std::process::ExitCode`] and [`std::process::Termination`]. The stabilization of these two APIs now makes it possible for programs to return errors from `main` with custom exit codes.
- [`std::thread::JoinHandle::is_finished`]
  These APIs are now usable in const contexts:
- [`&lt;*const T&gt;::offset` and `&lt;*mut T&gt;::offset`][ptr-offset]
- [`&lt;*const T&gt;::wrapping_offset` and `&lt;*mut T&gt;::wrapping_offset`][ptr-wrapping_offset]
- [`&lt;*const T&gt;::add` and `&lt;*mut T&gt;::add`][ptr-add]
- [`&lt;*const T&gt;::sub` and `&lt;*mut T&gt;::sub`][ptr-sub]
- [`&lt;*const T&gt;::wrapping_add` and `&lt;*mut T&gt;::wrapping_add`][ptr-wrapping_add]
- [`&lt;*const T&gt;::wrapping_sub` and `&lt;*mut T&gt;::wrapping_sub`][ptr-wrapping_sub]
- [`&lt;[T]&gt;::as_mut_ptr`][slice-as_mut_ptr]
- [`&lt;[T]&gt;::as_ptr_range`][slice-as_ptr_range]
- [`&lt;[T]&gt;::as_mut_ptr_range`][slice-as_mut_ptr_range]
  Cargo
-----
  No feature changes, but see compatibility notes.
  Compatibility Notes
- Previously native static libraries were linked as `whole-archive` in some cases, but now rustc tries not to use `whole-archive` unless explicitly requested. This [change][93901] may result in linking errors in some cases. To fix such errors, native libraries linked from the command line, build scripts, or [`#[link]` attributes][link-attr] need to
  - (more common) either be reordered to respect dependencies between them (if `a` depends on `b` then `a` should go first and `b` second)
  - (less common) or be updated to use the [`+whole-archive`] modifier.
- [Catching a second unwind from FFI code while cleaning up from a Rust panic now causes the process to abort][92911]
- [Proc macros no longer see `ident` matchers wrapped in groups][92472]
- [The number of `#` in `r#` raw string literals is now required to be less than 256][95251]
- [When checking that a dyn type satisfies a trait bound, supertrait bounds are now enforced][92285]
- [`cargo vendor` now only accepts one value for each `--sync` flag][cargo/10448]
- [`cfg` predicates in `all()` and `any()` are always evaluated to detect errors, instead of short-circuiting.][94295] The compatibility considerations here arise in nightly-only code that used the short-circuiting behavior of `all` to write something like `cfg(all(feature = "nightly", syntax-requiring-nightly))`, which will now fail to compile. Instead, use either `cfg_attr(feature = "nightly", ...)` or nested uses of `cfg`.
- [bootstrap: static-libstdcpp is now enabled by default, and can now be disabled when llvm-tools is enabled][94832]</changelog>
  <changelog author="william.brown@suse.com" date="1654171200">- Correct issue with linker that caused build ids to be invalid</changelog>
</package>
<package pkgid="9cc844cc06eca4ac2cd7408814a5b3924d466e0d62a725411d89fb49f91b3067" name="cargo1.62" arch="aarch64">
  <version epoch="0" ver="1.62.1" rel="150300.7.4.1"/>
  <changelog author="william.brown@suse.com" date="1656936000">Version 1.62.0 (2022-06-30)
  Language
--------
- [Stabilize `#[derive(Default)]` on enums with a `#[default]` variant][94457]
- [Teach flow sensitive checks that visibly uninhabited call expressions never return][93313]
- [Fix constants not getting dropped if part of a diverging expression][94775]
- [Support unit struct/enum variant in destructuring assignment][95380]
- [Remove mutable_borrow_reservation_conflict lint and allow the code pattern][96268]
  Compiler
--------
- [linker: Stop using whole-archive on dependencies of dylibs][96436]
- [Make `unaligned_references` lint deny-by-default][95372]
  This lint is also a future compatibility lint, and is expected to eventually
  become a hard error.
- [Only add codegen backend to dep info if -Zbinary-dep-depinfo is used][93969]
- [Reject `#[thread_local]` attribute on non-static items][95006]
- [Add tier 3 `aarch64-pc-windows-gnullvm` and `x86_64-pc-windows-gnullvm` targets\*][94872]
- [Implement a lint to warn about unused macro rules][96150]
- [Promote `x86_64-unknown-none` target to Tier 2\*][95705]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Windows: Use a pipe relay for chaining pipes][95841]
- [Replace Linux Mutex and Condvar with futex based ones.][95035]
- [Replace RwLock by a futex based one on Linux][95801]
- [std: directly use pthread in UNIX parker implementation][96393]
  Stabilized APIs
- [`bool::then_some`]
- [`f32::total_cmp`]
- [`f64::total_cmp`]
- [`Stdin::lines`]
- [`windows::CommandExt::raw_arg`]
- [`impl&lt;T: Default&gt; Default for AssertUnwindSafe&lt;T&gt;`]
- [`From&lt;Rc&lt;str&gt;&gt; for Rc&lt;[u8]&gt;`][rc-u8-from-str]
- [`From&lt;Arc&lt;str&gt;&gt; for Arc&lt;[u8]&gt;`][arc-u8-from-str]
- [`FusedIterator for EncodeWide`]
- [RDM intrinsics on aarch64][stdarch/1285]
  Clippy
------
- [Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions][94206]
  Cargo
-----
- Added the `cargo add` command for adding dependencies to `Cargo.toml` from
  the command-line.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-add.html)
- Package ID specs now support `name@version` syntax in addition to the
  previous `name:version` to align with the behavior in `cargo add` and other
  tools. `cargo install` and `cargo yank` also now support this syntax so the
  version does not need to passed as a separate flag.
- The `git` and `registry` directories in Cargo's home directory (usually
  `~/.cargo`) are now marked as cache directories so that they are not
  included in backups or content indexing (on Windows).
- Added automatic `@` argfile support, which will use "response files" if the
  command-line to `rustc` exceeds the operating system's limit.
  Compatibility Notes
- `cargo test` now passes `--target` to `rustdoc` if the specified target is
  the same as the host target.
  [#10594](https://github.com/rust-lang/cargo/pull/10594)
- [rustdoc: doctests are now run on unexported `macro_rules!` macros, matching other private items][96630]
- [rustdoc: Remove .woff font files][96279]
- [Enforce Copy bounds for repeat elements while considering lifetimes][95819]
- [Windows: Fix potentinal unsoundness by aborting if `File` reads or writes cannot
  complete synchronously][95469].</changelog>
  <changelog author="william.brown@suse.com" date="1657195200">- Experimental support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1658232000">- Remove incorrectly submitted 0001-fix-tests.patch</changelog>
  <changelog author="william.brown@suse.com" date="1658318400">Version 1.62.1 (2022-07-19)
  Rust 1.62.1 addresses a few recent regressions in the compiler and standard
  library, and also mitigates a CPU vulnerability on Intel SGX.
  * [The compiler fixed unsound function coercions involving `impl Trait` return types.][98608]
  * [The compiler fixed an incremental compilation bug with `async fn` lifetimes.][98890]
  * [Windows added a fallback for overlapped I/O in synchronous reads and writes.][98950]
  * [The `x86_64-fortanix-unknown-sgx` target added a mitigation for the
  MMIO stale data vulnerability][98126], advisory [INTEL-SA-00615].
  [98608]: https://github.com/rust-lang/rust/issues/98608
  [98890]: https://github.com/rust-lang/rust/issues/98890
  [98950]: https://github.com/rust-lang/rust/pull/98950
  [98126]: https://github.com/rust-lang/rust/pull/98126
  [INTEL-SA-00615]: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html</changelog>
  <changelog author="william.brown@suse.com" date="1658923200">- Improve support for wasi targets</changelog>
</package>
<package pkgid="9b682f71cd68bd7e065f48dfb107ad008a18717f37f42f7e469fcfab27d74a11" name="cargo1.62" arch="ppc64le">
  <version epoch="0" ver="1.62.1" rel="150300.7.4.1"/>
  <changelog author="william.brown@suse.com" date="1656936000">Version 1.62.0 (2022-06-30)
  Language
--------
- [Stabilize `#[derive(Default)]` on enums with a `#[default]` variant][94457]
- [Teach flow sensitive checks that visibly uninhabited call expressions never return][93313]
- [Fix constants not getting dropped if part of a diverging expression][94775]
- [Support unit struct/enum variant in destructuring assignment][95380]
- [Remove mutable_borrow_reservation_conflict lint and allow the code pattern][96268]
  Compiler
--------
- [linker: Stop using whole-archive on dependencies of dylibs][96436]
- [Make `unaligned_references` lint deny-by-default][95372]
  This lint is also a future compatibility lint, and is expected to eventually
  become a hard error.
- [Only add codegen backend to dep info if -Zbinary-dep-depinfo is used][93969]
- [Reject `#[thread_local]` attribute on non-static items][95006]
- [Add tier 3 `aarch64-pc-windows-gnullvm` and `x86_64-pc-windows-gnullvm` targets\*][94872]
- [Implement a lint to warn about unused macro rules][96150]
- [Promote `x86_64-unknown-none` target to Tier 2\*][95705]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Windows: Use a pipe relay for chaining pipes][95841]
- [Replace Linux Mutex and Condvar with futex based ones.][95035]
- [Replace RwLock by a futex based one on Linux][95801]
- [std: directly use pthread in UNIX parker implementation][96393]
  Stabilized APIs
- [`bool::then_some`]
- [`f32::total_cmp`]
- [`f64::total_cmp`]
- [`Stdin::lines`]
- [`windows::CommandExt::raw_arg`]
- [`impl&lt;T: Default&gt; Default for AssertUnwindSafe&lt;T&gt;`]
- [`From&lt;Rc&lt;str&gt;&gt; for Rc&lt;[u8]&gt;`][rc-u8-from-str]
- [`From&lt;Arc&lt;str&gt;&gt; for Arc&lt;[u8]&gt;`][arc-u8-from-str]
- [`FusedIterator for EncodeWide`]
- [RDM intrinsics on aarch64][stdarch/1285]
  Clippy
------
- [Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions][94206]
  Cargo
-----
- Added the `cargo add` command for adding dependencies to `Cargo.toml` from
  the command-line.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-add.html)
- Package ID specs now support `name@version` syntax in addition to the
  previous `name:version` to align with the behavior in `cargo add` and other
  tools. `cargo install` and `cargo yank` also now support this syntax so the
  version does not need to passed as a separate flag.
- The `git` and `registry` directories in Cargo's home directory (usually
  `~/.cargo`) are now marked as cache directories so that they are not
  included in backups or content indexing (on Windows).
- Added automatic `@` argfile support, which will use "response files" if the
  command-line to `rustc` exceeds the operating system's limit.
  Compatibility Notes
- `cargo test` now passes `--target` to `rustdoc` if the specified target is
  the same as the host target.
  [#10594](https://github.com/rust-lang/cargo/pull/10594)
- [rustdoc: doctests are now run on unexported `macro_rules!` macros, matching other private items][96630]
- [rustdoc: Remove .woff font files][96279]
- [Enforce Copy bounds for repeat elements while considering lifetimes][95819]
- [Windows: Fix potentinal unsoundness by aborting if `File` reads or writes cannot
  complete synchronously][95469].</changelog>
  <changelog author="william.brown@suse.com" date="1657195200">- Experimental support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1658232000">- Remove incorrectly submitted 0001-fix-tests.patch</changelog>
  <changelog author="william.brown@suse.com" date="1658318400">Version 1.62.1 (2022-07-19)
  Rust 1.62.1 addresses a few recent regressions in the compiler and standard
  library, and also mitigates a CPU vulnerability on Intel SGX.
  * [The compiler fixed unsound function coercions involving `impl Trait` return types.][98608]
  * [The compiler fixed an incremental compilation bug with `async fn` lifetimes.][98890]
  * [Windows added a fallback for overlapped I/O in synchronous reads and writes.][98950]
  * [The `x86_64-fortanix-unknown-sgx` target added a mitigation for the
  MMIO stale data vulnerability][98126], advisory [INTEL-SA-00615].
  [98608]: https://github.com/rust-lang/rust/issues/98608
  [98890]: https://github.com/rust-lang/rust/issues/98890
  [98950]: https://github.com/rust-lang/rust/pull/98950
  [98126]: https://github.com/rust-lang/rust/pull/98126
  [INTEL-SA-00615]: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html</changelog>
  <changelog author="william.brown@suse.com" date="1658923200">- Improve support for wasi targets</changelog>
</package>
<package pkgid="de33434e339daf2fdf728daa91d79da6c9a7d20780e3bb6ca522f21c2a125534" name="cargo1.62" arch="s390x">
  <version epoch="0" ver="1.62.1" rel="150300.7.4.1"/>
  <changelog author="william.brown@suse.com" date="1656936000">Version 1.62.0 (2022-06-30)
  Language
--------
- [Stabilize `#[derive(Default)]` on enums with a `#[default]` variant][94457]
- [Teach flow sensitive checks that visibly uninhabited call expressions never return][93313]
- [Fix constants not getting dropped if part of a diverging expression][94775]
- [Support unit struct/enum variant in destructuring assignment][95380]
- [Remove mutable_borrow_reservation_conflict lint and allow the code pattern][96268]
  Compiler
--------
- [linker: Stop using whole-archive on dependencies of dylibs][96436]
- [Make `unaligned_references` lint deny-by-default][95372]
  This lint is also a future compatibility lint, and is expected to eventually
  become a hard error.
- [Only add codegen backend to dep info if -Zbinary-dep-depinfo is used][93969]
- [Reject `#[thread_local]` attribute on non-static items][95006]
- [Add tier 3 `aarch64-pc-windows-gnullvm` and `x86_64-pc-windows-gnullvm` targets\*][94872]
- [Implement a lint to warn about unused macro rules][96150]
- [Promote `x86_64-unknown-none` target to Tier 2\*][95705]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Windows: Use a pipe relay for chaining pipes][95841]
- [Replace Linux Mutex and Condvar with futex based ones.][95035]
- [Replace RwLock by a futex based one on Linux][95801]
- [std: directly use pthread in UNIX parker implementation][96393]
  Stabilized APIs
- [`bool::then_some`]
- [`f32::total_cmp`]
- [`f64::total_cmp`]
- [`Stdin::lines`]
- [`windows::CommandExt::raw_arg`]
- [`impl&lt;T: Default&gt; Default for AssertUnwindSafe&lt;T&gt;`]
- [`From&lt;Rc&lt;str&gt;&gt; for Rc&lt;[u8]&gt;`][rc-u8-from-str]
- [`From&lt;Arc&lt;str&gt;&gt; for Arc&lt;[u8]&gt;`][arc-u8-from-str]
- [`FusedIterator for EncodeWide`]
- [RDM intrinsics on aarch64][stdarch/1285]
  Clippy
------
- [Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions][94206]
  Cargo
-----
- Added the `cargo add` command for adding dependencies to `Cargo.toml` from
  the command-line.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-add.html)
- Package ID specs now support `name@version` syntax in addition to the
  previous `name:version` to align with the behavior in `cargo add` and other
  tools. `cargo install` and `cargo yank` also now support this syntax so the
  version does not need to passed as a separate flag.
- The `git` and `registry` directories in Cargo's home directory (usually
  `~/.cargo`) are now marked as cache directories so that they are not
  included in backups or content indexing (on Windows).
- Added automatic `@` argfile support, which will use "response files" if the
  command-line to `rustc` exceeds the operating system's limit.
  Compatibility Notes
- `cargo test` now passes `--target` to `rustdoc` if the specified target is
  the same as the host target.
  [#10594](https://github.com/rust-lang/cargo/pull/10594)
- [rustdoc: doctests are now run on unexported `macro_rules!` macros, matching other private items][96630]
- [rustdoc: Remove .woff font files][96279]
- [Enforce Copy bounds for repeat elements while considering lifetimes][95819]
- [Windows: Fix potentinal unsoundness by aborting if `File` reads or writes cannot
  complete synchronously][95469].</changelog>
  <changelog author="william.brown@suse.com" date="1657195200">- Experimental support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1658232000">- Remove incorrectly submitted 0001-fix-tests.patch</changelog>
  <changelog author="william.brown@suse.com" date="1658318400">Version 1.62.1 (2022-07-19)
  Rust 1.62.1 addresses a few recent regressions in the compiler and standard
  library, and also mitigates a CPU vulnerability on Intel SGX.
  * [The compiler fixed unsound function coercions involving `impl Trait` return types.][98608]
  * [The compiler fixed an incremental compilation bug with `async fn` lifetimes.][98890]
  * [Windows added a fallback for overlapped I/O in synchronous reads and writes.][98950]
  * [The `x86_64-fortanix-unknown-sgx` target added a mitigation for the
  MMIO stale data vulnerability][98126], advisory [INTEL-SA-00615].
  [98608]: https://github.com/rust-lang/rust/issues/98608
  [98890]: https://github.com/rust-lang/rust/issues/98890
  [98950]: https://github.com/rust-lang/rust/pull/98950
  [98126]: https://github.com/rust-lang/rust/pull/98126
  [INTEL-SA-00615]: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html</changelog>
  <changelog author="william.brown@suse.com" date="1658923200">- Improve support for wasi targets</changelog>
</package>
<package pkgid="dfc7a4dd27d160b5db9fbdf8d00ef9ee87027530799b0eb5f7a635f735f29dab" name="cargo1.62" arch="x86_64">
  <version epoch="0" ver="1.62.1" rel="150300.7.4.1"/>
  <changelog author="william.brown@suse.com" date="1656936000">Version 1.62.0 (2022-06-30)
  Language
--------
- [Stabilize `#[derive(Default)]` on enums with a `#[default]` variant][94457]
- [Teach flow sensitive checks that visibly uninhabited call expressions never return][93313]
- [Fix constants not getting dropped if part of a diverging expression][94775]
- [Support unit struct/enum variant in destructuring assignment][95380]
- [Remove mutable_borrow_reservation_conflict lint and allow the code pattern][96268]
  Compiler
--------
- [linker: Stop using whole-archive on dependencies of dylibs][96436]
- [Make `unaligned_references` lint deny-by-default][95372]
  This lint is also a future compatibility lint, and is expected to eventually
  become a hard error.
- [Only add codegen backend to dep info if -Zbinary-dep-depinfo is used][93969]
- [Reject `#[thread_local]` attribute on non-static items][95006]
- [Add tier 3 `aarch64-pc-windows-gnullvm` and `x86_64-pc-windows-gnullvm` targets\*][94872]
- [Implement a lint to warn about unused macro rules][96150]
- [Promote `x86_64-unknown-none` target to Tier 2\*][95705]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Windows: Use a pipe relay for chaining pipes][95841]
- [Replace Linux Mutex and Condvar with futex based ones.][95035]
- [Replace RwLock by a futex based one on Linux][95801]
- [std: directly use pthread in UNIX parker implementation][96393]
  Stabilized APIs
- [`bool::then_some`]
- [`f32::total_cmp`]
- [`f64::total_cmp`]
- [`Stdin::lines`]
- [`windows::CommandExt::raw_arg`]
- [`impl&lt;T: Default&gt; Default for AssertUnwindSafe&lt;T&gt;`]
- [`From&lt;Rc&lt;str&gt;&gt; for Rc&lt;[u8]&gt;`][rc-u8-from-str]
- [`From&lt;Arc&lt;str&gt;&gt; for Arc&lt;[u8]&gt;`][arc-u8-from-str]
- [`FusedIterator for EncodeWide`]
- [RDM intrinsics on aarch64][stdarch/1285]
  Clippy
------
- [Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions][94206]
  Cargo
-----
- Added the `cargo add` command for adding dependencies to `Cargo.toml` from
  the command-line.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-add.html)
- Package ID specs now support `name@version` syntax in addition to the
  previous `name:version` to align with the behavior in `cargo add` and other
  tools. `cargo install` and `cargo yank` also now support this syntax so the
  version does not need to passed as a separate flag.
- The `git` and `registry` directories in Cargo's home directory (usually
  `~/.cargo`) are now marked as cache directories so that they are not
  included in backups or content indexing (on Windows).
- Added automatic `@` argfile support, which will use "response files" if the
  command-line to `rustc` exceeds the operating system's limit.
  Compatibility Notes
- `cargo test` now passes `--target` to `rustdoc` if the specified target is
  the same as the host target.
  [#10594](https://github.com/rust-lang/cargo/pull/10594)
- [rustdoc: doctests are now run on unexported `macro_rules!` macros, matching other private items][96630]
- [rustdoc: Remove .woff font files][96279]
- [Enforce Copy bounds for repeat elements while considering lifetimes][95819]
- [Windows: Fix potentinal unsoundness by aborting if `File` reads or writes cannot
  complete synchronously][95469].</changelog>
  <changelog author="william.brown@suse.com" date="1657195200">- Experimental support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1658232000">- Remove incorrectly submitted 0001-fix-tests.patch</changelog>
  <changelog author="william.brown@suse.com" date="1658318400">Version 1.62.1 (2022-07-19)
  Rust 1.62.1 addresses a few recent regressions in the compiler and standard
  library, and also mitigates a CPU vulnerability on Intel SGX.
  * [The compiler fixed unsound function coercions involving `impl Trait` return types.][98608]
  * [The compiler fixed an incremental compilation bug with `async fn` lifetimes.][98890]
  * [Windows added a fallback for overlapped I/O in synchronous reads and writes.][98950]
  * [The `x86_64-fortanix-unknown-sgx` target added a mitigation for the
  MMIO stale data vulnerability][98126], advisory [INTEL-SA-00615].
  [98608]: https://github.com/rust-lang/rust/issues/98608
  [98890]: https://github.com/rust-lang/rust/issues/98890
  [98950]: https://github.com/rust-lang/rust/pull/98950
  [98126]: https://github.com/rust-lang/rust/pull/98126
  [INTEL-SA-00615]: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html</changelog>
  <changelog author="william.brown@suse.com" date="1658923200">- Improve support for wasi targets</changelog>
</package>
<package pkgid="b2c0d2ea459d5e3fb3fef29ab1a4fed9e53e3ffc463ac4cf77f654df7999e177" name="cargo1.62" arch="aarch64">
  <version epoch="0" ver="1.62.1" rel="150300.7.7.1"/>
  <changelog author="william.brown@suse.com" date="1656936000">Version 1.62.0 (2022-06-30)
  Language
--------
- [Stabilize `#[derive(Default)]` on enums with a `#[default]` variant][94457]
- [Teach flow sensitive checks that visibly uninhabited call expressions never return][93313]
- [Fix constants not getting dropped if part of a diverging expression][94775]
- [Support unit struct/enum variant in destructuring assignment][95380]
- [Remove mutable_borrow_reservation_conflict lint and allow the code pattern][96268]
  Compiler
--------
- [linker: Stop using whole-archive on dependencies of dylibs][96436]
- [Make `unaligned_references` lint deny-by-default][95372]
  This lint is also a future compatibility lint, and is expected to eventually
  become a hard error.
- [Only add codegen backend to dep info if -Zbinary-dep-depinfo is used][93969]
- [Reject `#[thread_local]` attribute on non-static items][95006]
- [Add tier 3 `aarch64-pc-windows-gnullvm` and `x86_64-pc-windows-gnullvm` targets\*][94872]
- [Implement a lint to warn about unused macro rules][96150]
- [Promote `x86_64-unknown-none` target to Tier 2\*][95705]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Windows: Use a pipe relay for chaining pipes][95841]
- [Replace Linux Mutex and Condvar with futex based ones.][95035]
- [Replace RwLock by a futex based one on Linux][95801]
- [std: directly use pthread in UNIX parker implementation][96393]
  Stabilized APIs
- [`bool::then_some`]
- [`f32::total_cmp`]
- [`f64::total_cmp`]
- [`Stdin::lines`]
- [`windows::CommandExt::raw_arg`]
- [`impl&lt;T: Default&gt; Default for AssertUnwindSafe&lt;T&gt;`]
- [`From&lt;Rc&lt;str&gt;&gt; for Rc&lt;[u8]&gt;`][rc-u8-from-str]
- [`From&lt;Arc&lt;str&gt;&gt; for Arc&lt;[u8]&gt;`][arc-u8-from-str]
- [`FusedIterator for EncodeWide`]
- [RDM intrinsics on aarch64][stdarch/1285]
  Clippy
------
- [Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions][94206]
  Cargo
-----
- Added the `cargo add` command for adding dependencies to `Cargo.toml` from
  the command-line.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-add.html)
- Package ID specs now support `name@version` syntax in addition to the
  previous `name:version` to align with the behavior in `cargo add` and other
  tools. `cargo install` and `cargo yank` also now support this syntax so the
  version does not need to passed as a separate flag.
- The `git` and `registry` directories in Cargo's home directory (usually
  `~/.cargo`) are now marked as cache directories so that they are not
  included in backups or content indexing (on Windows).
- Added automatic `@` argfile support, which will use "response files" if the
  command-line to `rustc` exceeds the operating system's limit.
  Compatibility Notes
- `cargo test` now passes `--target` to `rustdoc` if the specified target is
  the same as the host target.
  [#10594](https://github.com/rust-lang/cargo/pull/10594)
- [rustdoc: doctests are now run on unexported `macro_rules!` macros, matching other private items][96630]
- [rustdoc: Remove .woff font files][96279]
- [Enforce Copy bounds for repeat elements while considering lifetimes][95819]
- [Windows: Fix potentinal unsoundness by aborting if `File` reads or writes cannot
  complete synchronously][95469].</changelog>
  <changelog author="william.brown@suse.com" date="1657195200">- Experimental support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1658232000">- Remove incorrectly submitted 0001-fix-tests.patch</changelog>
  <changelog author="william.brown@suse.com" date="1658318400">Version 1.62.1 (2022-07-19)
  Rust 1.62.1 addresses a few recent regressions in the compiler and standard
  library, and also mitigates a CPU vulnerability on Intel SGX.
  * [The compiler fixed unsound function coercions involving `impl Trait` return types.][98608]
  * [The compiler fixed an incremental compilation bug with `async fn` lifetimes.][98890]
  * [Windows added a fallback for overlapped I/O in synchronous reads and writes.][98950]
  * [The `x86_64-fortanix-unknown-sgx` target added a mitigation for the
  MMIO stale data vulnerability][98126], advisory [INTEL-SA-00615].
  [98608]: https://github.com/rust-lang/rust/issues/98608
  [98890]: https://github.com/rust-lang/rust/issues/98890
  [98950]: https://github.com/rust-lang/rust/pull/98950
  [98126]: https://github.com/rust-lang/rust/pull/98126
  [INTEL-SA-00615]: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html</changelog>
  <changelog author="william.brown@suse.com" date="1658923200">- Improve support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1663329600">- bsc#1203433 - CVE-2022-36113 - resolve symlink hijack
  * 0003-CVE-2022-36113-avoid-unpacking-.cargo-ok-from-the-cr.patch
- bsc #1203431 - CVE-2022-36114 - resolve zip bomb attack
  * 0002-CVE-2022-36114-limit-the-maximum-unpacked-size-of-a-.patch</changelog>
</package>
<package pkgid="5e14b89fa4c6efbd8c48eee2110a32614be36c7a408bdfbefdabf15f6c5cb844" name="cargo1.62" arch="ppc64le">
  <version epoch="0" ver="1.62.1" rel="150300.7.7.1"/>
  <changelog author="william.brown@suse.com" date="1656936000">Version 1.62.0 (2022-06-30)
  Language
--------
- [Stabilize `#[derive(Default)]` on enums with a `#[default]` variant][94457]
- [Teach flow sensitive checks that visibly uninhabited call expressions never return][93313]
- [Fix constants not getting dropped if part of a diverging expression][94775]
- [Support unit struct/enum variant in destructuring assignment][95380]
- [Remove mutable_borrow_reservation_conflict lint and allow the code pattern][96268]
  Compiler
--------
- [linker: Stop using whole-archive on dependencies of dylibs][96436]
- [Make `unaligned_references` lint deny-by-default][95372]
  This lint is also a future compatibility lint, and is expected to eventually
  become a hard error.
- [Only add codegen backend to dep info if -Zbinary-dep-depinfo is used][93969]
- [Reject `#[thread_local]` attribute on non-static items][95006]
- [Add tier 3 `aarch64-pc-windows-gnullvm` and `x86_64-pc-windows-gnullvm` targets\*][94872]
- [Implement a lint to warn about unused macro rules][96150]
- [Promote `x86_64-unknown-none` target to Tier 2\*][95705]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Windows: Use a pipe relay for chaining pipes][95841]
- [Replace Linux Mutex and Condvar with futex based ones.][95035]
- [Replace RwLock by a futex based one on Linux][95801]
- [std: directly use pthread in UNIX parker implementation][96393]
  Stabilized APIs
- [`bool::then_some`]
- [`f32::total_cmp`]
- [`f64::total_cmp`]
- [`Stdin::lines`]
- [`windows::CommandExt::raw_arg`]
- [`impl&lt;T: Default&gt; Default for AssertUnwindSafe&lt;T&gt;`]
- [`From&lt;Rc&lt;str&gt;&gt; for Rc&lt;[u8]&gt;`][rc-u8-from-str]
- [`From&lt;Arc&lt;str&gt;&gt; for Arc&lt;[u8]&gt;`][arc-u8-from-str]
- [`FusedIterator for EncodeWide`]
- [RDM intrinsics on aarch64][stdarch/1285]
  Clippy
------
- [Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions][94206]
  Cargo
-----
- Added the `cargo add` command for adding dependencies to `Cargo.toml` from
  the command-line.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-add.html)
- Package ID specs now support `name@version` syntax in addition to the
  previous `name:version` to align with the behavior in `cargo add` and other
  tools. `cargo install` and `cargo yank` also now support this syntax so the
  version does not need to passed as a separate flag.
- The `git` and `registry` directories in Cargo's home directory (usually
  `~/.cargo`) are now marked as cache directories so that they are not
  included in backups or content indexing (on Windows).
- Added automatic `@` argfile support, which will use "response files" if the
  command-line to `rustc` exceeds the operating system's limit.
  Compatibility Notes
- `cargo test` now passes `--target` to `rustdoc` if the specified target is
  the same as the host target.
  [#10594](https://github.com/rust-lang/cargo/pull/10594)
- [rustdoc: doctests are now run on unexported `macro_rules!` macros, matching other private items][96630]
- [rustdoc: Remove .woff font files][96279]
- [Enforce Copy bounds for repeat elements while considering lifetimes][95819]
- [Windows: Fix potentinal unsoundness by aborting if `File` reads or writes cannot
  complete synchronously][95469].</changelog>
  <changelog author="william.brown@suse.com" date="1657195200">- Experimental support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1658232000">- Remove incorrectly submitted 0001-fix-tests.patch</changelog>
  <changelog author="william.brown@suse.com" date="1658318400">Version 1.62.1 (2022-07-19)
  Rust 1.62.1 addresses a few recent regressions in the compiler and standard
  library, and also mitigates a CPU vulnerability on Intel SGX.
  * [The compiler fixed unsound function coercions involving `impl Trait` return types.][98608]
  * [The compiler fixed an incremental compilation bug with `async fn` lifetimes.][98890]
  * [Windows added a fallback for overlapped I/O in synchronous reads and writes.][98950]
  * [The `x86_64-fortanix-unknown-sgx` target added a mitigation for the
  MMIO stale data vulnerability][98126], advisory [INTEL-SA-00615].
  [98608]: https://github.com/rust-lang/rust/issues/98608
  [98890]: https://github.com/rust-lang/rust/issues/98890
  [98950]: https://github.com/rust-lang/rust/pull/98950
  [98126]: https://github.com/rust-lang/rust/pull/98126
  [INTEL-SA-00615]: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html</changelog>
  <changelog author="william.brown@suse.com" date="1658923200">- Improve support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1663329600">- bsc#1203433 - CVE-2022-36113 - resolve symlink hijack
  * 0003-CVE-2022-36113-avoid-unpacking-.cargo-ok-from-the-cr.patch
- bsc #1203431 - CVE-2022-36114 - resolve zip bomb attack
  * 0002-CVE-2022-36114-limit-the-maximum-unpacked-size-of-a-.patch</changelog>
</package>
<package pkgid="949456c57c52caa06367521460abc4aeee5e57bacf05c7102aa978b35111c3fc" name="cargo1.62" arch="s390x">
  <version epoch="0" ver="1.62.1" rel="150300.7.7.1"/>
  <changelog author="william.brown@suse.com" date="1656936000">Version 1.62.0 (2022-06-30)
  Language
--------
- [Stabilize `#[derive(Default)]` on enums with a `#[default]` variant][94457]
- [Teach flow sensitive checks that visibly uninhabited call expressions never return][93313]
- [Fix constants not getting dropped if part of a diverging expression][94775]
- [Support unit struct/enum variant in destructuring assignment][95380]
- [Remove mutable_borrow_reservation_conflict lint and allow the code pattern][96268]
  Compiler
--------
- [linker: Stop using whole-archive on dependencies of dylibs][96436]
- [Make `unaligned_references` lint deny-by-default][95372]
  This lint is also a future compatibility lint, and is expected to eventually
  become a hard error.
- [Only add codegen backend to dep info if -Zbinary-dep-depinfo is used][93969]
- [Reject `#[thread_local]` attribute on non-static items][95006]
- [Add tier 3 `aarch64-pc-windows-gnullvm` and `x86_64-pc-windows-gnullvm` targets\*][94872]
- [Implement a lint to warn about unused macro rules][96150]
- [Promote `x86_64-unknown-none` target to Tier 2\*][95705]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Windows: Use a pipe relay for chaining pipes][95841]
- [Replace Linux Mutex and Condvar with futex based ones.][95035]
- [Replace RwLock by a futex based one on Linux][95801]
- [std: directly use pthread in UNIX parker implementation][96393]
  Stabilized APIs
- [`bool::then_some`]
- [`f32::total_cmp`]
- [`f64::total_cmp`]
- [`Stdin::lines`]
- [`windows::CommandExt::raw_arg`]
- [`impl&lt;T: Default&gt; Default for AssertUnwindSafe&lt;T&gt;`]
- [`From&lt;Rc&lt;str&gt;&gt; for Rc&lt;[u8]&gt;`][rc-u8-from-str]
- [`From&lt;Arc&lt;str&gt;&gt; for Arc&lt;[u8]&gt;`][arc-u8-from-str]
- [`FusedIterator for EncodeWide`]
- [RDM intrinsics on aarch64][stdarch/1285]
  Clippy
------
- [Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions][94206]
  Cargo
-----
- Added the `cargo add` command for adding dependencies to `Cargo.toml` from
  the command-line.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-add.html)
- Package ID specs now support `name@version` syntax in addition to the
  previous `name:version` to align with the behavior in `cargo add` and other
  tools. `cargo install` and `cargo yank` also now support this syntax so the
  version does not need to passed as a separate flag.
- The `git` and `registry` directories in Cargo's home directory (usually
  `~/.cargo`) are now marked as cache directories so that they are not
  included in backups or content indexing (on Windows).
- Added automatic `@` argfile support, which will use "response files" if the
  command-line to `rustc` exceeds the operating system's limit.
  Compatibility Notes
- `cargo test` now passes `--target` to `rustdoc` if the specified target is
  the same as the host target.
  [#10594](https://github.com/rust-lang/cargo/pull/10594)
- [rustdoc: doctests are now run on unexported `macro_rules!` macros, matching other private items][96630]
- [rustdoc: Remove .woff font files][96279]
- [Enforce Copy bounds for repeat elements while considering lifetimes][95819]
- [Windows: Fix potentinal unsoundness by aborting if `File` reads or writes cannot
  complete synchronously][95469].</changelog>
  <changelog author="william.brown@suse.com" date="1657195200">- Experimental support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1658232000">- Remove incorrectly submitted 0001-fix-tests.patch</changelog>
  <changelog author="william.brown@suse.com" date="1658318400">Version 1.62.1 (2022-07-19)
  Rust 1.62.1 addresses a few recent regressions in the compiler and standard
  library, and also mitigates a CPU vulnerability on Intel SGX.
  * [The compiler fixed unsound function coercions involving `impl Trait` return types.][98608]
  * [The compiler fixed an incremental compilation bug with `async fn` lifetimes.][98890]
  * [Windows added a fallback for overlapped I/O in synchronous reads and writes.][98950]
  * [The `x86_64-fortanix-unknown-sgx` target added a mitigation for the
  MMIO stale data vulnerability][98126], advisory [INTEL-SA-00615].
  [98608]: https://github.com/rust-lang/rust/issues/98608
  [98890]: https://github.com/rust-lang/rust/issues/98890
  [98950]: https://github.com/rust-lang/rust/pull/98950
  [98126]: https://github.com/rust-lang/rust/pull/98126
  [INTEL-SA-00615]: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html</changelog>
  <changelog author="william.brown@suse.com" date="1658923200">- Improve support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1663329600">- bsc#1203433 - CVE-2022-36113 - resolve symlink hijack
  * 0003-CVE-2022-36113-avoid-unpacking-.cargo-ok-from-the-cr.patch
- bsc #1203431 - CVE-2022-36114 - resolve zip bomb attack
  * 0002-CVE-2022-36114-limit-the-maximum-unpacked-size-of-a-.patch</changelog>
</package>
<package pkgid="abdf910235a9e1fb5c6872d5f299331beedc5e821c4b6ba3e120d9c25abef5d4" name="cargo1.62" arch="x86_64">
  <version epoch="0" ver="1.62.1" rel="150300.7.7.1"/>
  <changelog author="william.brown@suse.com" date="1656936000">Version 1.62.0 (2022-06-30)
  Language
--------
- [Stabilize `#[derive(Default)]` on enums with a `#[default]` variant][94457]
- [Teach flow sensitive checks that visibly uninhabited call expressions never return][93313]
- [Fix constants not getting dropped if part of a diverging expression][94775]
- [Support unit struct/enum variant in destructuring assignment][95380]
- [Remove mutable_borrow_reservation_conflict lint and allow the code pattern][96268]
  Compiler
--------
- [linker: Stop using whole-archive on dependencies of dylibs][96436]
- [Make `unaligned_references` lint deny-by-default][95372]
  This lint is also a future compatibility lint, and is expected to eventually
  become a hard error.
- [Only add codegen backend to dep info if -Zbinary-dep-depinfo is used][93969]
- [Reject `#[thread_local]` attribute on non-static items][95006]
- [Add tier 3 `aarch64-pc-windows-gnullvm` and `x86_64-pc-windows-gnullvm` targets\*][94872]
- [Implement a lint to warn about unused macro rules][96150]
- [Promote `x86_64-unknown-none` target to Tier 2\*][95705]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Windows: Use a pipe relay for chaining pipes][95841]
- [Replace Linux Mutex and Condvar with futex based ones.][95035]
- [Replace RwLock by a futex based one on Linux][95801]
- [std: directly use pthread in UNIX parker implementation][96393]
  Stabilized APIs
- [`bool::then_some`]
- [`f32::total_cmp`]
- [`f64::total_cmp`]
- [`Stdin::lines`]
- [`windows::CommandExt::raw_arg`]
- [`impl&lt;T: Default&gt; Default for AssertUnwindSafe&lt;T&gt;`]
- [`From&lt;Rc&lt;str&gt;&gt; for Rc&lt;[u8]&gt;`][rc-u8-from-str]
- [`From&lt;Arc&lt;str&gt;&gt; for Arc&lt;[u8]&gt;`][arc-u8-from-str]
- [`FusedIterator for EncodeWide`]
- [RDM intrinsics on aarch64][stdarch/1285]
  Clippy
------
- [Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions][94206]
  Cargo
-----
- Added the `cargo add` command for adding dependencies to `Cargo.toml` from
  the command-line.
  [docs](https://doc.rust-lang.org/nightly/cargo/commands/cargo-add.html)
- Package ID specs now support `name@version` syntax in addition to the
  previous `name:version` to align with the behavior in `cargo add` and other
  tools. `cargo install` and `cargo yank` also now support this syntax so the
  version does not need to passed as a separate flag.
- The `git` and `registry` directories in Cargo's home directory (usually
  `~/.cargo`) are now marked as cache directories so that they are not
  included in backups or content indexing (on Windows).
- Added automatic `@` argfile support, which will use "response files" if the
  command-line to `rustc` exceeds the operating system's limit.
  Compatibility Notes
- `cargo test` now passes `--target` to `rustdoc` if the specified target is
  the same as the host target.
  [#10594](https://github.com/rust-lang/cargo/pull/10594)
- [rustdoc: doctests are now run on unexported `macro_rules!` macros, matching other private items][96630]
- [rustdoc: Remove .woff font files][96279]
- [Enforce Copy bounds for repeat elements while considering lifetimes][95819]
- [Windows: Fix potentinal unsoundness by aborting if `File` reads or writes cannot
  complete synchronously][95469].</changelog>
  <changelog author="william.brown@suse.com" date="1657195200">- Experimental support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1658232000">- Remove incorrectly submitted 0001-fix-tests.patch</changelog>
  <changelog author="william.brown@suse.com" date="1658318400">Version 1.62.1 (2022-07-19)
  Rust 1.62.1 addresses a few recent regressions in the compiler and standard
  library, and also mitigates a CPU vulnerability on Intel SGX.
  * [The compiler fixed unsound function coercions involving `impl Trait` return types.][98608]
  * [The compiler fixed an incremental compilation bug with `async fn` lifetimes.][98890]
  * [Windows added a fallback for overlapped I/O in synchronous reads and writes.][98950]
  * [The `x86_64-fortanix-unknown-sgx` target added a mitigation for the
  MMIO stale data vulnerability][98126], advisory [INTEL-SA-00615].
  [98608]: https://github.com/rust-lang/rust/issues/98608
  [98890]: https://github.com/rust-lang/rust/issues/98890
  [98950]: https://github.com/rust-lang/rust/pull/98950
  [98126]: https://github.com/rust-lang/rust/pull/98126
  [INTEL-SA-00615]: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00615.html</changelog>
  <changelog author="william.brown@suse.com" date="1658923200">- Improve support for wasi targets</changelog>
  <changelog author="william.brown@suse.com" date="1663329600">- bsc#1203433 - CVE-2022-36113 - resolve symlink hijack
  * 0003-CVE-2022-36113-avoid-unpacking-.cargo-ok-from-the-cr.patch
- bsc #1203431 - CVE-2022-36114 - resolve zip bomb attack
  * 0002-CVE-2022-36114-limit-the-maximum-unpacked-size-of-a-.patch</changelog>
</package>
<package pkgid="fe9d702e4dd2eff3e01366519ed537808e40789234dceeddceb6c5daf6f0dccf" name="cargo1.63" arch="aarch64">
  <version epoch="0" ver="1.63.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1661256000">Version 1.63.0 (2022-08-11)
  Language
--------
- [Remove migrate borrowck mode for pre-NLL errors.][95565]
- [Modify MIR building to drop repeat expressions with length zero.][95953]
- [Remove label/lifetime shadowing warnings.][96296]
- [Allow explicit generic arguments in the presence of `impl Trait` args.][96868]
- [Make `cenum_impl_drop_cast` warnings deny-by-default.][97652]
- [Prevent unwinding when `-C panic=abort` is used regardless of declared ABI.][96959]
- [lub: don't bail out due to empty binders.][97867]
  Compiler
--------
- [Stabilize the `bundle` native library modifier,][95818] also removing the
  deprecated `static-nobundle` linking kind.
- [Add Apple WatchOS compile targets\*.][95243]
- [Add a Windows application manifest to rustc-main.][96737]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Implement `Copy`, `Clone`, `PartialEq` and `Eq` for `core::fmt::Alignment`.][94530]
- [Extend `ptr::null` and `null_mut` to all thin (including extern) types.][94954]
- [`impl Read and Write for VecDeque&lt;u8&gt;`.][95632]
- [STD support for the Nintendo 3DS.][95897]
- [Use rounding in float to Duration conversion methods.][96051]
- [Make write/print macros eagerly drop temporaries.][96455]
- [Implement internal traits that enable `[OsStr]::join`.][96881]
- [Implement `Hash` for `core::alloc::Layout`.][97034]
- [Add capacity documentation for `OsString`.][97202]
- [Put a bound on collection misbehavior.][97316]
- [Make `std::mem::needs_drop` accept `?Sized`.][97675]
- [`impl Termination for Infallible` and then make the `Result` impls of `Termination` more generic.][97803]
- [Document Rust's stance on `/proc/self/mem`.][97837]
  Stabilized APIs
- [`array::from_fn`]
- [`Box::into_pin`]
- [`BinaryHeap::try_reserve`]
- [`BinaryHeap::try_reserve_exact`]
- [`OsString::try_reserve`]
- [`OsString::try_reserve_exact`]
- [`PathBuf::try_reserve`]
- [`PathBuf::try_reserve_exact`]
- [`Path::try_exists`]
- [`Ref::filter_map`]
- [`RefMut::filter_map`]
- [`NonNull::&lt;[T]&gt;::len`][`NonNull::&lt;slice&gt;::len`]
- [`ToOwned::clone_into`]
- [`Ipv6Addr::to_ipv4_mapped`]
- [`unix::io::AsFd`]
- [`unix::io::BorrowedFd&lt;'fd&gt;`]
- [`unix::io::OwnedFd`]
- [`windows::io::AsHandle`]
- [`windows::io::BorrowedHandle&lt;'handle&gt;`]
- [`windows::io::OwnedHandle`]
- [`windows::io::HandleOrInvalid`]
- [`windows::io::HandleOrNull`]
- [`windows::io::InvalidHandleError`]
- [`windows::io::NullHandleError`]
- [`windows::io::AsSocket`]
- [`windows::io::BorrowedSocket&lt;'handle&gt;`]
- [`windows::io::OwnedSocket`]
- [`thread::scope`]
- [`thread::Scope`]
- [`thread::ScopedJoinHandle`]
  These APIs are now usable in const contexts:
- [`array::from_ref`]
- [`slice::from_ref`]
- [`intrinsics::copy`]
- [`intrinsics::copy_nonoverlapping`]
- [`&lt;*const T&gt;::copy_to`]
- [`&lt;*const T&gt;::copy_to_nonoverlapping`]
- [`&lt;*mut T&gt;::copy_to`]
- [`&lt;*mut T&gt;::copy_to_nonoverlapping`]
- [`&lt;*mut T&gt;::copy_from`]
- [`&lt;*mut T&gt;::copy_from_nonoverlapping`]
- [`str::from_utf8`]
- [`Utf8Error::error_len`]
- [`Utf8Error::valid_up_to`]
- [`Condvar::new`]
- [`Mutex::new`]
- [`RwLock::new`]
  Cargo
-----
- [Stabilize the `--config path` command-line argument.][cargo/10755]
- [Expose rust-version in the environment as `CARGO_PKG_RUST_VERSION`.][cargo/10713]
  Compatibility Notes
- [`#[link]` attributes are now checked more strictly,][96885] which may introduce
  errors for invalid attribute arguments that were previously ignored.
- [Rounding is now used when converting a float to a `Duration`.][96051] The converted
  duration can differ slightly from what it was.</changelog>
  <changelog author="william.brown@suse.com" date="1662984000">- Disable test that relies on static PIE for Leap/SLE.
  * 0001-remove-test-that-relies-on-static-PIE.patch</changelog>
  <changelog author="william.brown@suse.com" date="1663329600">- bsc#1203433 - CVE-2022-36113 - resolve symlink hijack
  * 0003-CVE-2022-36113-avoid-unpacking-.cargo-ok-from-the-cr.patch
- bsc #1203431 - CVE-2022-36114 - resolve zip bomb attack
  * 0002-CVE-2022-36114-limit-the-maximum-unpacked-size-of-a-.patch</changelog>
</package>
<package pkgid="123b15c65f2ddd72870581189f4dd5058c44c78503d73805a647f18540d9e499" name="cargo1.63" arch="ppc64le">
  <version epoch="0" ver="1.63.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1661256000">Version 1.63.0 (2022-08-11)
  Language
--------
- [Remove migrate borrowck mode for pre-NLL errors.][95565]
- [Modify MIR building to drop repeat expressions with length zero.][95953]
- [Remove label/lifetime shadowing warnings.][96296]
- [Allow explicit generic arguments in the presence of `impl Trait` args.][96868]
- [Make `cenum_impl_drop_cast` warnings deny-by-default.][97652]
- [Prevent unwinding when `-C panic=abort` is used regardless of declared ABI.][96959]
- [lub: don't bail out due to empty binders.][97867]
  Compiler
--------
- [Stabilize the `bundle` native library modifier,][95818] also removing the
  deprecated `static-nobundle` linking kind.
- [Add Apple WatchOS compile targets\*.][95243]
- [Add a Windows application manifest to rustc-main.][96737]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Implement `Copy`, `Clone`, `PartialEq` and `Eq` for `core::fmt::Alignment`.][94530]
- [Extend `ptr::null` and `null_mut` to all thin (including extern) types.][94954]
- [`impl Read and Write for VecDeque&lt;u8&gt;`.][95632]
- [STD support for the Nintendo 3DS.][95897]
- [Use rounding in float to Duration conversion methods.][96051]
- [Make write/print macros eagerly drop temporaries.][96455]
- [Implement internal traits that enable `[OsStr]::join`.][96881]
- [Implement `Hash` for `core::alloc::Layout`.][97034]
- [Add capacity documentation for `OsString`.][97202]
- [Put a bound on collection misbehavior.][97316]
- [Make `std::mem::needs_drop` accept `?Sized`.][97675]
- [`impl Termination for Infallible` and then make the `Result` impls of `Termination` more generic.][97803]
- [Document Rust's stance on `/proc/self/mem`.][97837]
  Stabilized APIs
- [`array::from_fn`]
- [`Box::into_pin`]
- [`BinaryHeap::try_reserve`]
- [`BinaryHeap::try_reserve_exact`]
- [`OsString::try_reserve`]
- [`OsString::try_reserve_exact`]
- [`PathBuf::try_reserve`]
- [`PathBuf::try_reserve_exact`]
- [`Path::try_exists`]
- [`Ref::filter_map`]
- [`RefMut::filter_map`]
- [`NonNull::&lt;[T]&gt;::len`][`NonNull::&lt;slice&gt;::len`]
- [`ToOwned::clone_into`]
- [`Ipv6Addr::to_ipv4_mapped`]
- [`unix::io::AsFd`]
- [`unix::io::BorrowedFd&lt;'fd&gt;`]
- [`unix::io::OwnedFd`]
- [`windows::io::AsHandle`]
- [`windows::io::BorrowedHandle&lt;'handle&gt;`]
- [`windows::io::OwnedHandle`]
- [`windows::io::HandleOrInvalid`]
- [`windows::io::HandleOrNull`]
- [`windows::io::InvalidHandleError`]
- [`windows::io::NullHandleError`]
- [`windows::io::AsSocket`]
- [`windows::io::BorrowedSocket&lt;'handle&gt;`]
- [`windows::io::OwnedSocket`]
- [`thread::scope`]
- [`thread::Scope`]
- [`thread::ScopedJoinHandle`]
  These APIs are now usable in const contexts:
- [`array::from_ref`]
- [`slice::from_ref`]
- [`intrinsics::copy`]
- [`intrinsics::copy_nonoverlapping`]
- [`&lt;*const T&gt;::copy_to`]
- [`&lt;*const T&gt;::copy_to_nonoverlapping`]
- [`&lt;*mut T&gt;::copy_to`]
- [`&lt;*mut T&gt;::copy_to_nonoverlapping`]
- [`&lt;*mut T&gt;::copy_from`]
- [`&lt;*mut T&gt;::copy_from_nonoverlapping`]
- [`str::from_utf8`]
- [`Utf8Error::error_len`]
- [`Utf8Error::valid_up_to`]
- [`Condvar::new`]
- [`Mutex::new`]
- [`RwLock::new`]
  Cargo
-----
- [Stabilize the `--config path` command-line argument.][cargo/10755]
- [Expose rust-version in the environment as `CARGO_PKG_RUST_VERSION`.][cargo/10713]
  Compatibility Notes
- [`#[link]` attributes are now checked more strictly,][96885] which may introduce
  errors for invalid attribute arguments that were previously ignored.
- [Rounding is now used when converting a float to a `Duration`.][96051] The converted
  duration can differ slightly from what it was.</changelog>
  <changelog author="william.brown@suse.com" date="1662984000">- Disable test that relies on static PIE for Leap/SLE.
  * 0001-remove-test-that-relies-on-static-PIE.patch</changelog>
  <changelog author="william.brown@suse.com" date="1663329600">- bsc#1203433 - CVE-2022-36113 - resolve symlink hijack
  * 0003-CVE-2022-36113-avoid-unpacking-.cargo-ok-from-the-cr.patch
- bsc #1203431 - CVE-2022-36114 - resolve zip bomb attack
  * 0002-CVE-2022-36114-limit-the-maximum-unpacked-size-of-a-.patch</changelog>
</package>
<package pkgid="7af1800a992f8aea35d1f474cf858ce4818e949fa3bd9c8a7463dabeae15af94" name="cargo1.63" arch="s390x">
  <version epoch="0" ver="1.63.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1661256000">Version 1.63.0 (2022-08-11)
  Language
--------
- [Remove migrate borrowck mode for pre-NLL errors.][95565]
- [Modify MIR building to drop repeat expressions with length zero.][95953]
- [Remove label/lifetime shadowing warnings.][96296]
- [Allow explicit generic arguments in the presence of `impl Trait` args.][96868]
- [Make `cenum_impl_drop_cast` warnings deny-by-default.][97652]
- [Prevent unwinding when `-C panic=abort` is used regardless of declared ABI.][96959]
- [lub: don't bail out due to empty binders.][97867]
  Compiler
--------
- [Stabilize the `bundle` native library modifier,][95818] also removing the
  deprecated `static-nobundle` linking kind.
- [Add Apple WatchOS compile targets\*.][95243]
- [Add a Windows application manifest to rustc-main.][96737]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Implement `Copy`, `Clone`, `PartialEq` and `Eq` for `core::fmt::Alignment`.][94530]
- [Extend `ptr::null` and `null_mut` to all thin (including extern) types.][94954]
- [`impl Read and Write for VecDeque&lt;u8&gt;`.][95632]
- [STD support for the Nintendo 3DS.][95897]
- [Use rounding in float to Duration conversion methods.][96051]
- [Make write/print macros eagerly drop temporaries.][96455]
- [Implement internal traits that enable `[OsStr]::join`.][96881]
- [Implement `Hash` for `core::alloc::Layout`.][97034]
- [Add capacity documentation for `OsString`.][97202]
- [Put a bound on collection misbehavior.][97316]
- [Make `std::mem::needs_drop` accept `?Sized`.][97675]
- [`impl Termination for Infallible` and then make the `Result` impls of `Termination` more generic.][97803]
- [Document Rust's stance on `/proc/self/mem`.][97837]
  Stabilized APIs
- [`array::from_fn`]
- [`Box::into_pin`]
- [`BinaryHeap::try_reserve`]
- [`BinaryHeap::try_reserve_exact`]
- [`OsString::try_reserve`]
- [`OsString::try_reserve_exact`]
- [`PathBuf::try_reserve`]
- [`PathBuf::try_reserve_exact`]
- [`Path::try_exists`]
- [`Ref::filter_map`]
- [`RefMut::filter_map`]
- [`NonNull::&lt;[T]&gt;::len`][`NonNull::&lt;slice&gt;::len`]
- [`ToOwned::clone_into`]
- [`Ipv6Addr::to_ipv4_mapped`]
- [`unix::io::AsFd`]
- [`unix::io::BorrowedFd&lt;'fd&gt;`]
- [`unix::io::OwnedFd`]
- [`windows::io::AsHandle`]
- [`windows::io::BorrowedHandle&lt;'handle&gt;`]
- [`windows::io::OwnedHandle`]
- [`windows::io::HandleOrInvalid`]
- [`windows::io::HandleOrNull`]
- [`windows::io::InvalidHandleError`]
- [`windows::io::NullHandleError`]
- [`windows::io::AsSocket`]
- [`windows::io::BorrowedSocket&lt;'handle&gt;`]
- [`windows::io::OwnedSocket`]
- [`thread::scope`]
- [`thread::Scope`]
- [`thread::ScopedJoinHandle`]
  These APIs are now usable in const contexts:
- [`array::from_ref`]
- [`slice::from_ref`]
- [`intrinsics::copy`]
- [`intrinsics::copy_nonoverlapping`]
- [`&lt;*const T&gt;::copy_to`]
- [`&lt;*const T&gt;::copy_to_nonoverlapping`]
- [`&lt;*mut T&gt;::copy_to`]
- [`&lt;*mut T&gt;::copy_to_nonoverlapping`]
- [`&lt;*mut T&gt;::copy_from`]
- [`&lt;*mut T&gt;::copy_from_nonoverlapping`]
- [`str::from_utf8`]
- [`Utf8Error::error_len`]
- [`Utf8Error::valid_up_to`]
- [`Condvar::new`]
- [`Mutex::new`]
- [`RwLock::new`]
  Cargo
-----
- [Stabilize the `--config path` command-line argument.][cargo/10755]
- [Expose rust-version in the environment as `CARGO_PKG_RUST_VERSION`.][cargo/10713]
  Compatibility Notes
- [`#[link]` attributes are now checked more strictly,][96885] which may introduce
  errors for invalid attribute arguments that were previously ignored.
- [Rounding is now used when converting a float to a `Duration`.][96051] The converted
  duration can differ slightly from what it was.</changelog>
  <changelog author="william.brown@suse.com" date="1662984000">- Disable test that relies on static PIE for Leap/SLE.
  * 0001-remove-test-that-relies-on-static-PIE.patch</changelog>
  <changelog author="william.brown@suse.com" date="1663329600">- bsc#1203433 - CVE-2022-36113 - resolve symlink hijack
  * 0003-CVE-2022-36113-avoid-unpacking-.cargo-ok-from-the-cr.patch
- bsc #1203431 - CVE-2022-36114 - resolve zip bomb attack
  * 0002-CVE-2022-36114-limit-the-maximum-unpacked-size-of-a-.patch</changelog>
</package>
<package pkgid="a236aee2f4f084715c4a1da3a77d5ab819faf1d74aff2878471ababd10ed1294" name="cargo1.63" arch="x86_64">
  <version epoch="0" ver="1.63.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1661256000">Version 1.63.0 (2022-08-11)
  Language
--------
- [Remove migrate borrowck mode for pre-NLL errors.][95565]
- [Modify MIR building to drop repeat expressions with length zero.][95953]
- [Remove label/lifetime shadowing warnings.][96296]
- [Allow explicit generic arguments in the presence of `impl Trait` args.][96868]
- [Make `cenum_impl_drop_cast` warnings deny-by-default.][97652]
- [Prevent unwinding when `-C panic=abort` is used regardless of declared ABI.][96959]
- [lub: don't bail out due to empty binders.][97867]
  Compiler
--------
- [Stabilize the `bundle` native library modifier,][95818] also removing the
  deprecated `static-nobundle` linking kind.
- [Add Apple WatchOS compile targets\*.][95243]
- [Add a Windows application manifest to rustc-main.][96737]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Implement `Copy`, `Clone`, `PartialEq` and `Eq` for `core::fmt::Alignment`.][94530]
- [Extend `ptr::null` and `null_mut` to all thin (including extern) types.][94954]
- [`impl Read and Write for VecDeque&lt;u8&gt;`.][95632]
- [STD support for the Nintendo 3DS.][95897]
- [Use rounding in float to Duration conversion methods.][96051]
- [Make write/print macros eagerly drop temporaries.][96455]
- [Implement internal traits that enable `[OsStr]::join`.][96881]
- [Implement `Hash` for `core::alloc::Layout`.][97034]
- [Add capacity documentation for `OsString`.][97202]
- [Put a bound on collection misbehavior.][97316]
- [Make `std::mem::needs_drop` accept `?Sized`.][97675]
- [`impl Termination for Infallible` and then make the `Result` impls of `Termination` more generic.][97803]
- [Document Rust's stance on `/proc/self/mem`.][97837]
  Stabilized APIs
- [`array::from_fn`]
- [`Box::into_pin`]
- [`BinaryHeap::try_reserve`]
- [`BinaryHeap::try_reserve_exact`]
- [`OsString::try_reserve`]
- [`OsString::try_reserve_exact`]
- [`PathBuf::try_reserve`]
- [`PathBuf::try_reserve_exact`]
- [`Path::try_exists`]
- [`Ref::filter_map`]
- [`RefMut::filter_map`]
- [`NonNull::&lt;[T]&gt;::len`][`NonNull::&lt;slice&gt;::len`]
- [`ToOwned::clone_into`]
- [`Ipv6Addr::to_ipv4_mapped`]
- [`unix::io::AsFd`]
- [`unix::io::BorrowedFd&lt;'fd&gt;`]
- [`unix::io::OwnedFd`]
- [`windows::io::AsHandle`]
- [`windows::io::BorrowedHandle&lt;'handle&gt;`]
- [`windows::io::OwnedHandle`]
- [`windows::io::HandleOrInvalid`]
- [`windows::io::HandleOrNull`]
- [`windows::io::InvalidHandleError`]
- [`windows::io::NullHandleError`]
- [`windows::io::AsSocket`]
- [`windows::io::BorrowedSocket&lt;'handle&gt;`]
- [`windows::io::OwnedSocket`]
- [`thread::scope`]
- [`thread::Scope`]
- [`thread::ScopedJoinHandle`]
  These APIs are now usable in const contexts:
- [`array::from_ref`]
- [`slice::from_ref`]
- [`intrinsics::copy`]
- [`intrinsics::copy_nonoverlapping`]
- [`&lt;*const T&gt;::copy_to`]
- [`&lt;*const T&gt;::copy_to_nonoverlapping`]
- [`&lt;*mut T&gt;::copy_to`]
- [`&lt;*mut T&gt;::copy_to_nonoverlapping`]
- [`&lt;*mut T&gt;::copy_from`]
- [`&lt;*mut T&gt;::copy_from_nonoverlapping`]
- [`str::from_utf8`]
- [`Utf8Error::error_len`]
- [`Utf8Error::valid_up_to`]
- [`Condvar::new`]
- [`Mutex::new`]
- [`RwLock::new`]
  Cargo
-----
- [Stabilize the `--config path` command-line argument.][cargo/10755]
- [Expose rust-version in the environment as `CARGO_PKG_RUST_VERSION`.][cargo/10713]
  Compatibility Notes
- [`#[link]` attributes are now checked more strictly,][96885] which may introduce
  errors for invalid attribute arguments that were previously ignored.
- [Rounding is now used when converting a float to a `Duration`.][96051] The converted
  duration can differ slightly from what it was.</changelog>
  <changelog author="william.brown@suse.com" date="1662984000">- Disable test that relies on static PIE for Leap/SLE.
  * 0001-remove-test-that-relies-on-static-PIE.patch</changelog>
  <changelog author="william.brown@suse.com" date="1663329600">- bsc#1203433 - CVE-2022-36113 - resolve symlink hijack
  * 0003-CVE-2022-36113-avoid-unpacking-.cargo-ok-from-the-cr.patch
- bsc #1203431 - CVE-2022-36114 - resolve zip bomb attack
  * 0002-CVE-2022-36114-limit-the-maximum-unpacked-size-of-a-.patch</changelog>
</package>
<package pkgid="0aed17c2a220f38df54b4adb7cd1b1a20585f1a4b9d1cc918c8898dbec99daeb" name="cargo1.64" arch="aarch64">
  <version epoch="0" ver="1.64.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1663934400">Version 1.64.0 (2022-09-22)
  Language
--------
- [Unions with mutable references or tuples of allowed types are now allowed](https://github.com/rust-lang/rust/pull/97995/)
- It is now considered valid to deallocate memory pointed to by a shared reference `&amp;T` [if every byte in `T` is inside an `UnsafeCell`](https://github.com/rust-lang/rust/pull/98017/)
- Unused tuple struct fields are now warned against in an allow-by-default lint, [`unused_tuple_struct_fields`](https://github.com/rust-lang/rust/pull/95977/), similar to the existing warning for unused struct fields. This lint will become warn-by-default in the future.
  Compiler
--------
- [Add Nintendo Switch as tier 3 target](https://github.com/rust-lang/rust/pull/88991/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Only compile `#[used]` as llvm.compiler.used for ELF targets](https://github.com/rust-lang/rust/pull/93718/)
- [Add the `--diagnostic-width` compiler flag to define the terminal width.](https://github.com/rust-lang/rust/pull/95635/)
- [Add support for link-flavor `rust-lld` for iOS, tvOS and watchOS](https://github.com/rust-lang/rust/pull/98771/)
  Libraries
---------
- [Remove restrictions on compare-exchange memory ordering.](https://github.com/rust-lang/rust/pull/98383/)
- You can now `write!` or `writeln!` into an `OsString`: [Implement `fmt::Write` for `OsString`](https://github.com/rust-lang/rust/pull/97915/)
- [Make RwLockReadGuard covariant](https://github.com/rust-lang/rust/pull/96820/)
- [Implement `FusedIterator` for `std::net::[Into]Incoming`](https://github.com/rust-lang/rust/pull/97300/)
- [`impl&lt;T: AsRawFd&gt; AsRawFd for {Arc,Box}&lt;T&gt;`](https://github.com/rust-lang/rust/pull/97437/)
- [`ptr::copy` and `ptr::swap` are doing untyped copies](https://github.com/rust-lang/rust/pull/97712/)
- [Add cgroupv1 support to `available_parallelism`](https://github.com/rust-lang/rust/pull/97925/)
- [Mitigate many incorrect uses of `mem::uninitialized`](https://github.com/rust-lang/rust/pull/99182/)
  Stabilized APIs
- [`future::IntoFuture`](https://doc.rust-lang.org/stable/std/future/trait.IntoFuture.html)
- [`future::poll_fn`](https://doc.rust-lang.org/stable/std/future/fn.poll_fn.html)
- [`task::ready!`](https://doc.rust-lang.org/stable/std/task/macro.ready.html)
- [`num::NonZero*::checked_mul`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_mul)
- [`num::NonZero*::checked_pow`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_pow)
- [`num::NonZero*::saturating_mul`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_mul)
- [`num::NonZero*::saturating_pow`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_pow)
- [`num::NonZeroI*::abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.abs)
- [`num::NonZeroI*::checked_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.checked_abs)
- [`num::NonZeroI*::overflowing_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.overflowing_abs)
- [`num::NonZeroI*::saturating_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.saturating_abs)
- [`num::NonZeroI*::unsigned_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.unsigned_abs)
- [`num::NonZeroI*::wrapping_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.wrapping_abs)
- [`num::NonZeroU*::checked_add`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_add)
- [`num::NonZeroU*::checked_next_power_of_two`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_next_power_of_two)
- [`num::NonZeroU*::saturating_add`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_add)
- [`os::unix::process::CommandExt::process_group`](https://doc.rust-lang.org/stable/std/os/unix/process/trait.CommandExt.html#tymethod.process_group)
- [`os::windows::fs::FileTypeExt::is_symlink_dir`](https://doc.rust-lang.org/stable/std/os/windows/fs/trait.FileTypeExt.html#tymethod.is_symlink_dir)
- [`os::windows::fs::FileTypeExt::is_symlink_file`](https://doc.rust-lang.org/stable/std/os/windows/fs/trait.FileTypeExt.html#tymethod.is_symlink_file)
  These types were previously stable in `std::ffi`, but are now also available in `core` and `alloc`:
- [`core::ffi::CStr`](https://doc.rust-lang.org/stable/core/ffi/struct.CStr.html)
- [`core::ffi::FromBytesWithNulError`](https://doc.rust-lang.org/stable/core/ffi/struct.FromBytesWithNulError.html)
- [`alloc::ffi::CString`](https://doc.rust-lang.org/stable/alloc/ffi/struct.CString.html)
- [`alloc::ffi::FromVecWithNulError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.FromVecWithNulError.html)
- [`alloc::ffi::IntoStringError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.IntoStringError.html)
- [`alloc::ffi::NulError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.NulError.html)
  These types were previously stable in `std::os::raw`, but are now also available in `core::ffi` and `std::ffi`:
- [`ffi::c_char`](https://doc.rust-lang.org/stable/std/ffi/type.c_char.html)
- [`ffi::c_double`](https://doc.rust-lang.org/stable/std/ffi/type.c_double.html)
- [`ffi::c_float`](https://doc.rust-lang.org/stable/std/ffi/type.c_float.html)
- [`ffi::c_int`](https://doc.rust-lang.org/stable/std/ffi/type.c_int.html)
- [`ffi::c_long`](https://doc.rust-lang.org/stable/std/ffi/type.c_long.html)
- [`ffi::c_longlong`](https://doc.rust-lang.org/stable/std/ffi/type.c_longlong.html)
- [`ffi::c_schar`](https://doc.rust-lang.org/stable/std/ffi/type.c_schar.html)
- [`ffi::c_short`](https://doc.rust-lang.org/stable/std/ffi/type.c_short.html)
- [`ffi::c_uchar`](https://doc.rust-lang.org/stable/std/ffi/type.c_uchar.html)
- [`ffi::c_uint`](https://doc.rust-lang.org/stable/std/ffi/type.c_uint.html)
- [`ffi::c_ulong`](https://doc.rust-lang.org/stable/std/ffi/type.c_ulong.html)
- [`ffi::c_ulonglong`](https://doc.rust-lang.org/stable/std/ffi/type.c_ulonglong.html)
- [`ffi::c_ushort`](https://doc.rust-lang.org/stable/std/ffi/type.c_ushort.html)
  These APIs are now usable in const contexts:
- [`slice::from_raw_parts`](https://doc.rust-lang.org/stable/core/slice/fn.from_raw_parts.html)
  Cargo
-----
- [Packages can now inherit settings from the workspace so that the settings
  can be centralized in one place.](https://github.com/rust-lang/cargo/pull/10859) See
  [`workspace.package`](https://doc.rust-lang.org/nightly/cargo/reference/workspaces.html#the-workspacepackage-table)
  and
  [`workspace.dependencies`](https://doc.rust-lang.org/nightly/cargo/reference/workspaces.html#the-workspacedependencies-table)
  for more details on how to define these common settings.
- [Cargo commands can now accept multiple `--target` flags to build for
  multiple targets at once](https://github.com/rust-lang/cargo/pull/10766), and the
  [`build.target`](https://doc.rust-lang.org/nightly/cargo/reference/config.html#buildtarget)
  config option may now take an array of multiple targets.
- [The `--jobs` argument can now take a negative number to count backwards from
  the max CPUs.](https://github.com/rust-lang/cargo/pull/10844)
- [`cargo add` will now update `Cargo.lock`.](https://github.com/rust-lang/cargo/pull/10902)
- [Added](https://github.com/rust-lang/cargo/pull/10838) the
  [`--crate-type`](https://doc.rust-lang.org/nightly/cargo/commands/cargo-rustc.html#option-cargo-rustc---crate-type)
  flag to `cargo rustc` to override the crate type.
- [Significantly improved the performance fetching git dependencies from GitHub
  when using a hash in the `rev` field.](https://github.com/rust-lang/cargo/pull/10079)
  Misc
----
- [The `rust-analyzer` rustup component is now available on the stable channel.](https://github.com/rust-lang/rust/pull/98640/)
  Compatibility Notes
- The minimum required versions for all `-linux-gnu` targets are now at least kernel 3.2 and glibc 2.17, for targets that previously supported older versions: [Increase the minimum linux-gnu versions](https://github.com/rust-lang/rust/pull/95026/)
- [Network primitives are now implemented with the ideal Rust layout, not the C system layout](https://github.com/rust-lang/rust/pull/78802/). This can cause problems when transmuting the types.
- [Add assertion that `transmute_copy`'s `U` is not larger than `T`](https://github.com/rust-lang/rust/pull/98839/)
- [A soundness bug in `BTreeMap` was fixed](https://github.com/rust-lang/rust/pull/99413/) that allowed data it was borrowing to be dropped before the container.
- [The Drop behavior of C-like enums cast to ints has changed](https://github.com/rust-lang/rust/pull/96862/). These are already discouraged by a compiler warning.
- [Relate late-bound closure lifetimes to parent fn in NLL](https://github.com/rust-lang/rust/pull/98835/)
- [Errors at const-eval time are now in future incompatibility reports](https://github.com/rust-lang/rust/pull/97743/)
- On the `thumbv6m-none-eabi` target, some incorrect `asm!` statements were erroneously accepted if they used the high registers (r8 to r14) as an input/output operand. [This is no longer accepted](https://github.com/rust-lang/rust/pull/99155/).
- [`impl Trait` was accidentally accepted as the associated type value of return-position `impl Trait`](https://github.com/rust-lang/rust/pull/97346/), without fulfilling all the trait bounds of that associated type, as long as the hidden type satisfies said bounds. This has been fixed.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664539200">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1664884800">- Fix missing libexec move for tools
- Repair linker path for cxx build</changelog>
</package>
<package pkgid="d6cbf65176427e10d6fa26e26a1e7db5e9d4b2e50cfc59d2703d16618b73831f" name="cargo1.64" arch="ppc64le">
  <version epoch="0" ver="1.64.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1663934400">Version 1.64.0 (2022-09-22)
  Language
--------
- [Unions with mutable references or tuples of allowed types are now allowed](https://github.com/rust-lang/rust/pull/97995/)
- It is now considered valid to deallocate memory pointed to by a shared reference `&amp;T` [if every byte in `T` is inside an `UnsafeCell`](https://github.com/rust-lang/rust/pull/98017/)
- Unused tuple struct fields are now warned against in an allow-by-default lint, [`unused_tuple_struct_fields`](https://github.com/rust-lang/rust/pull/95977/), similar to the existing warning for unused struct fields. This lint will become warn-by-default in the future.
  Compiler
--------
- [Add Nintendo Switch as tier 3 target](https://github.com/rust-lang/rust/pull/88991/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Only compile `#[used]` as llvm.compiler.used for ELF targets](https://github.com/rust-lang/rust/pull/93718/)
- [Add the `--diagnostic-width` compiler flag to define the terminal width.](https://github.com/rust-lang/rust/pull/95635/)
- [Add support for link-flavor `rust-lld` for iOS, tvOS and watchOS](https://github.com/rust-lang/rust/pull/98771/)
  Libraries
---------
- [Remove restrictions on compare-exchange memory ordering.](https://github.com/rust-lang/rust/pull/98383/)
- You can now `write!` or `writeln!` into an `OsString`: [Implement `fmt::Write` for `OsString`](https://github.com/rust-lang/rust/pull/97915/)
- [Make RwLockReadGuard covariant](https://github.com/rust-lang/rust/pull/96820/)
- [Implement `FusedIterator` for `std::net::[Into]Incoming`](https://github.com/rust-lang/rust/pull/97300/)
- [`impl&lt;T: AsRawFd&gt; AsRawFd for {Arc,Box}&lt;T&gt;`](https://github.com/rust-lang/rust/pull/97437/)
- [`ptr::copy` and `ptr::swap` are doing untyped copies](https://github.com/rust-lang/rust/pull/97712/)
- [Add cgroupv1 support to `available_parallelism`](https://github.com/rust-lang/rust/pull/97925/)
- [Mitigate many incorrect uses of `mem::uninitialized`](https://github.com/rust-lang/rust/pull/99182/)
  Stabilized APIs
- [`future::IntoFuture`](https://doc.rust-lang.org/stable/std/future/trait.IntoFuture.html)
- [`future::poll_fn`](https://doc.rust-lang.org/stable/std/future/fn.poll_fn.html)
- [`task::ready!`](https://doc.rust-lang.org/stable/std/task/macro.ready.html)
- [`num::NonZero*::checked_mul`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_mul)
- [`num::NonZero*::checked_pow`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_pow)
- [`num::NonZero*::saturating_mul`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_mul)
- [`num::NonZero*::saturating_pow`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_pow)
- [`num::NonZeroI*::abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.abs)
- [`num::NonZeroI*::checked_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.checked_abs)
- [`num::NonZeroI*::overflowing_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.overflowing_abs)
- [`num::NonZeroI*::saturating_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.saturating_abs)
- [`num::NonZeroI*::unsigned_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.unsigned_abs)
- [`num::NonZeroI*::wrapping_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.wrapping_abs)
- [`num::NonZeroU*::checked_add`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_add)
- [`num::NonZeroU*::checked_next_power_of_two`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_next_power_of_two)
- [`num::NonZeroU*::saturating_add`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_add)
- [`os::unix::process::CommandExt::process_group`](https://doc.rust-lang.org/stable/std/os/unix/process/trait.CommandExt.html#tymethod.process_group)
- [`os::windows::fs::FileTypeExt::is_symlink_dir`](https://doc.rust-lang.org/stable/std/os/windows/fs/trait.FileTypeExt.html#tymethod.is_symlink_dir)
- [`os::windows::fs::FileTypeExt::is_symlink_file`](https://doc.rust-lang.org/stable/std/os/windows/fs/trait.FileTypeExt.html#tymethod.is_symlink_file)
  These types were previously stable in `std::ffi`, but are now also available in `core` and `alloc`:
- [`core::ffi::CStr`](https://doc.rust-lang.org/stable/core/ffi/struct.CStr.html)
- [`core::ffi::FromBytesWithNulError`](https://doc.rust-lang.org/stable/core/ffi/struct.FromBytesWithNulError.html)
- [`alloc::ffi::CString`](https://doc.rust-lang.org/stable/alloc/ffi/struct.CString.html)
- [`alloc::ffi::FromVecWithNulError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.FromVecWithNulError.html)
- [`alloc::ffi::IntoStringError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.IntoStringError.html)
- [`alloc::ffi::NulError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.NulError.html)
  These types were previously stable in `std::os::raw`, but are now also available in `core::ffi` and `std::ffi`:
- [`ffi::c_char`](https://doc.rust-lang.org/stable/std/ffi/type.c_char.html)
- [`ffi::c_double`](https://doc.rust-lang.org/stable/std/ffi/type.c_double.html)
- [`ffi::c_float`](https://doc.rust-lang.org/stable/std/ffi/type.c_float.html)
- [`ffi::c_int`](https://doc.rust-lang.org/stable/std/ffi/type.c_int.html)
- [`ffi::c_long`](https://doc.rust-lang.org/stable/std/ffi/type.c_long.html)
- [`ffi::c_longlong`](https://doc.rust-lang.org/stable/std/ffi/type.c_longlong.html)
- [`ffi::c_schar`](https://doc.rust-lang.org/stable/std/ffi/type.c_schar.html)
- [`ffi::c_short`](https://doc.rust-lang.org/stable/std/ffi/type.c_short.html)
- [`ffi::c_uchar`](https://doc.rust-lang.org/stable/std/ffi/type.c_uchar.html)
- [`ffi::c_uint`](https://doc.rust-lang.org/stable/std/ffi/type.c_uint.html)
- [`ffi::c_ulong`](https://doc.rust-lang.org/stable/std/ffi/type.c_ulong.html)
- [`ffi::c_ulonglong`](https://doc.rust-lang.org/stable/std/ffi/type.c_ulonglong.html)
- [`ffi::c_ushort`](https://doc.rust-lang.org/stable/std/ffi/type.c_ushort.html)
  These APIs are now usable in const contexts:
- [`slice::from_raw_parts`](https://doc.rust-lang.org/stable/core/slice/fn.from_raw_parts.html)
  Cargo
-----
- [Packages can now inherit settings from the workspace so that the settings
  can be centralized in one place.](https://github.com/rust-lang/cargo/pull/10859) See
  [`workspace.package`](https://doc.rust-lang.org/nightly/cargo/reference/workspaces.html#the-workspacepackage-table)
  and
  [`workspace.dependencies`](https://doc.rust-lang.org/nightly/cargo/reference/workspaces.html#the-workspacedependencies-table)
  for more details on how to define these common settings.
- [Cargo commands can now accept multiple `--target` flags to build for
  multiple targets at once](https://github.com/rust-lang/cargo/pull/10766), and the
  [`build.target`](https://doc.rust-lang.org/nightly/cargo/reference/config.html#buildtarget)
  config option may now take an array of multiple targets.
- [The `--jobs` argument can now take a negative number to count backwards from
  the max CPUs.](https://github.com/rust-lang/cargo/pull/10844)
- [`cargo add` will now update `Cargo.lock`.](https://github.com/rust-lang/cargo/pull/10902)
- [Added](https://github.com/rust-lang/cargo/pull/10838) the
  [`--crate-type`](https://doc.rust-lang.org/nightly/cargo/commands/cargo-rustc.html#option-cargo-rustc---crate-type)
  flag to `cargo rustc` to override the crate type.
- [Significantly improved the performance fetching git dependencies from GitHub
  when using a hash in the `rev` field.](https://github.com/rust-lang/cargo/pull/10079)
  Misc
----
- [The `rust-analyzer` rustup component is now available on the stable channel.](https://github.com/rust-lang/rust/pull/98640/)
  Compatibility Notes
- The minimum required versions for all `-linux-gnu` targets are now at least kernel 3.2 and glibc 2.17, for targets that previously supported older versions: [Increase the minimum linux-gnu versions](https://github.com/rust-lang/rust/pull/95026/)
- [Network primitives are now implemented with the ideal Rust layout, not the C system layout](https://github.com/rust-lang/rust/pull/78802/). This can cause problems when transmuting the types.
- [Add assertion that `transmute_copy`'s `U` is not larger than `T`](https://github.com/rust-lang/rust/pull/98839/)
- [A soundness bug in `BTreeMap` was fixed](https://github.com/rust-lang/rust/pull/99413/) that allowed data it was borrowing to be dropped before the container.
- [The Drop behavior of C-like enums cast to ints has changed](https://github.com/rust-lang/rust/pull/96862/). These are already discouraged by a compiler warning.
- [Relate late-bound closure lifetimes to parent fn in NLL](https://github.com/rust-lang/rust/pull/98835/)
- [Errors at const-eval time are now in future incompatibility reports](https://github.com/rust-lang/rust/pull/97743/)
- On the `thumbv6m-none-eabi` target, some incorrect `asm!` statements were erroneously accepted if they used the high registers (r8 to r14) as an input/output operand. [This is no longer accepted](https://github.com/rust-lang/rust/pull/99155/).
- [`impl Trait` was accidentally accepted as the associated type value of return-position `impl Trait`](https://github.com/rust-lang/rust/pull/97346/), without fulfilling all the trait bounds of that associated type, as long as the hidden type satisfies said bounds. This has been fixed.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664539200">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1664884800">- Fix missing libexec move for tools
- Repair linker path for cxx build</changelog>
</package>
<package pkgid="804ab32762b474db88fc7305480896e4a840486fadec774eecf825be5fcdcdc0" name="cargo1.64" arch="s390x">
  <version epoch="0" ver="1.64.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1663934400">Version 1.64.0 (2022-09-22)
  Language
--------
- [Unions with mutable references or tuples of allowed types are now allowed](https://github.com/rust-lang/rust/pull/97995/)
- It is now considered valid to deallocate memory pointed to by a shared reference `&amp;T` [if every byte in `T` is inside an `UnsafeCell`](https://github.com/rust-lang/rust/pull/98017/)
- Unused tuple struct fields are now warned against in an allow-by-default lint, [`unused_tuple_struct_fields`](https://github.com/rust-lang/rust/pull/95977/), similar to the existing warning for unused struct fields. This lint will become warn-by-default in the future.
  Compiler
--------
- [Add Nintendo Switch as tier 3 target](https://github.com/rust-lang/rust/pull/88991/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Only compile `#[used]` as llvm.compiler.used for ELF targets](https://github.com/rust-lang/rust/pull/93718/)
- [Add the `--diagnostic-width` compiler flag to define the terminal width.](https://github.com/rust-lang/rust/pull/95635/)
- [Add support for link-flavor `rust-lld` for iOS, tvOS and watchOS](https://github.com/rust-lang/rust/pull/98771/)
  Libraries
---------
- [Remove restrictions on compare-exchange memory ordering.](https://github.com/rust-lang/rust/pull/98383/)
- You can now `write!` or `writeln!` into an `OsString`: [Implement `fmt::Write` for `OsString`](https://github.com/rust-lang/rust/pull/97915/)
- [Make RwLockReadGuard covariant](https://github.com/rust-lang/rust/pull/96820/)
- [Implement `FusedIterator` for `std::net::[Into]Incoming`](https://github.com/rust-lang/rust/pull/97300/)
- [`impl&lt;T: AsRawFd&gt; AsRawFd for {Arc,Box}&lt;T&gt;`](https://github.com/rust-lang/rust/pull/97437/)
- [`ptr::copy` and `ptr::swap` are doing untyped copies](https://github.com/rust-lang/rust/pull/97712/)
- [Add cgroupv1 support to `available_parallelism`](https://github.com/rust-lang/rust/pull/97925/)
- [Mitigate many incorrect uses of `mem::uninitialized`](https://github.com/rust-lang/rust/pull/99182/)
  Stabilized APIs
- [`future::IntoFuture`](https://doc.rust-lang.org/stable/std/future/trait.IntoFuture.html)
- [`future::poll_fn`](https://doc.rust-lang.org/stable/std/future/fn.poll_fn.html)
- [`task::ready!`](https://doc.rust-lang.org/stable/std/task/macro.ready.html)
- [`num::NonZero*::checked_mul`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_mul)
- [`num::NonZero*::checked_pow`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_pow)
- [`num::NonZero*::saturating_mul`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_mul)
- [`num::NonZero*::saturating_pow`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_pow)
- [`num::NonZeroI*::abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.abs)
- [`num::NonZeroI*::checked_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.checked_abs)
- [`num::NonZeroI*::overflowing_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.overflowing_abs)
- [`num::NonZeroI*::saturating_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.saturating_abs)
- [`num::NonZeroI*::unsigned_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.unsigned_abs)
- [`num::NonZeroI*::wrapping_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.wrapping_abs)
- [`num::NonZeroU*::checked_add`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_add)
- [`num::NonZeroU*::checked_next_power_of_two`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_next_power_of_two)
- [`num::NonZeroU*::saturating_add`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_add)
- [`os::unix::process::CommandExt::process_group`](https://doc.rust-lang.org/stable/std/os/unix/process/trait.CommandExt.html#tymethod.process_group)
- [`os::windows::fs::FileTypeExt::is_symlink_dir`](https://doc.rust-lang.org/stable/std/os/windows/fs/trait.FileTypeExt.html#tymethod.is_symlink_dir)
- [`os::windows::fs::FileTypeExt::is_symlink_file`](https://doc.rust-lang.org/stable/std/os/windows/fs/trait.FileTypeExt.html#tymethod.is_symlink_file)
  These types were previously stable in `std::ffi`, but are now also available in `core` and `alloc`:
- [`core::ffi::CStr`](https://doc.rust-lang.org/stable/core/ffi/struct.CStr.html)
- [`core::ffi::FromBytesWithNulError`](https://doc.rust-lang.org/stable/core/ffi/struct.FromBytesWithNulError.html)
- [`alloc::ffi::CString`](https://doc.rust-lang.org/stable/alloc/ffi/struct.CString.html)
- [`alloc::ffi::FromVecWithNulError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.FromVecWithNulError.html)
- [`alloc::ffi::IntoStringError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.IntoStringError.html)
- [`alloc::ffi::NulError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.NulError.html)
  These types were previously stable in `std::os::raw`, but are now also available in `core::ffi` and `std::ffi`:
- [`ffi::c_char`](https://doc.rust-lang.org/stable/std/ffi/type.c_char.html)
- [`ffi::c_double`](https://doc.rust-lang.org/stable/std/ffi/type.c_double.html)
- [`ffi::c_float`](https://doc.rust-lang.org/stable/std/ffi/type.c_float.html)
- [`ffi::c_int`](https://doc.rust-lang.org/stable/std/ffi/type.c_int.html)
- [`ffi::c_long`](https://doc.rust-lang.org/stable/std/ffi/type.c_long.html)
- [`ffi::c_longlong`](https://doc.rust-lang.org/stable/std/ffi/type.c_longlong.html)
- [`ffi::c_schar`](https://doc.rust-lang.org/stable/std/ffi/type.c_schar.html)
- [`ffi::c_short`](https://doc.rust-lang.org/stable/std/ffi/type.c_short.html)
- [`ffi::c_uchar`](https://doc.rust-lang.org/stable/std/ffi/type.c_uchar.html)
- [`ffi::c_uint`](https://doc.rust-lang.org/stable/std/ffi/type.c_uint.html)
- [`ffi::c_ulong`](https://doc.rust-lang.org/stable/std/ffi/type.c_ulong.html)
- [`ffi::c_ulonglong`](https://doc.rust-lang.org/stable/std/ffi/type.c_ulonglong.html)
- [`ffi::c_ushort`](https://doc.rust-lang.org/stable/std/ffi/type.c_ushort.html)
  These APIs are now usable in const contexts:
- [`slice::from_raw_parts`](https://doc.rust-lang.org/stable/core/slice/fn.from_raw_parts.html)
  Cargo
-----
- [Packages can now inherit settings from the workspace so that the settings
  can be centralized in one place.](https://github.com/rust-lang/cargo/pull/10859) See
  [`workspace.package`](https://doc.rust-lang.org/nightly/cargo/reference/workspaces.html#the-workspacepackage-table)
  and
  [`workspace.dependencies`](https://doc.rust-lang.org/nightly/cargo/reference/workspaces.html#the-workspacedependencies-table)
  for more details on how to define these common settings.
- [Cargo commands can now accept multiple `--target` flags to build for
  multiple targets at once](https://github.com/rust-lang/cargo/pull/10766), and the
  [`build.target`](https://doc.rust-lang.org/nightly/cargo/reference/config.html#buildtarget)
  config option may now take an array of multiple targets.
- [The `--jobs` argument can now take a negative number to count backwards from
  the max CPUs.](https://github.com/rust-lang/cargo/pull/10844)
- [`cargo add` will now update `Cargo.lock`.](https://github.com/rust-lang/cargo/pull/10902)
- [Added](https://github.com/rust-lang/cargo/pull/10838) the
  [`--crate-type`](https://doc.rust-lang.org/nightly/cargo/commands/cargo-rustc.html#option-cargo-rustc---crate-type)
  flag to `cargo rustc` to override the crate type.
- [Significantly improved the performance fetching git dependencies from GitHub
  when using a hash in the `rev` field.](https://github.com/rust-lang/cargo/pull/10079)
  Misc
----
- [The `rust-analyzer` rustup component is now available on the stable channel.](https://github.com/rust-lang/rust/pull/98640/)
  Compatibility Notes
- The minimum required versions for all `-linux-gnu` targets are now at least kernel 3.2 and glibc 2.17, for targets that previously supported older versions: [Increase the minimum linux-gnu versions](https://github.com/rust-lang/rust/pull/95026/)
- [Network primitives are now implemented with the ideal Rust layout, not the C system layout](https://github.com/rust-lang/rust/pull/78802/). This can cause problems when transmuting the types.
- [Add assertion that `transmute_copy`'s `U` is not larger than `T`](https://github.com/rust-lang/rust/pull/98839/)
- [A soundness bug in `BTreeMap` was fixed](https://github.com/rust-lang/rust/pull/99413/) that allowed data it was borrowing to be dropped before the container.
- [The Drop behavior of C-like enums cast to ints has changed](https://github.com/rust-lang/rust/pull/96862/). These are already discouraged by a compiler warning.
- [Relate late-bound closure lifetimes to parent fn in NLL](https://github.com/rust-lang/rust/pull/98835/)
- [Errors at const-eval time are now in future incompatibility reports](https://github.com/rust-lang/rust/pull/97743/)
- On the `thumbv6m-none-eabi` target, some incorrect `asm!` statements were erroneously accepted if they used the high registers (r8 to r14) as an input/output operand. [This is no longer accepted](https://github.com/rust-lang/rust/pull/99155/).
- [`impl Trait` was accidentally accepted as the associated type value of return-position `impl Trait`](https://github.com/rust-lang/rust/pull/97346/), without fulfilling all the trait bounds of that associated type, as long as the hidden type satisfies said bounds. This has been fixed.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664539200">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1664884800">- Fix missing libexec move for tools
- Repair linker path for cxx build</changelog>
</package>
<package pkgid="4e775f212f83dbccb36ed060c71ff713e05dccebcc7914817adfa554bbab5209" name="cargo1.64" arch="x86_64">
  <version epoch="0" ver="1.64.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1663934400">Version 1.64.0 (2022-09-22)
  Language
--------
- [Unions with mutable references or tuples of allowed types are now allowed](https://github.com/rust-lang/rust/pull/97995/)
- It is now considered valid to deallocate memory pointed to by a shared reference `&amp;T` [if every byte in `T` is inside an `UnsafeCell`](https://github.com/rust-lang/rust/pull/98017/)
- Unused tuple struct fields are now warned against in an allow-by-default lint, [`unused_tuple_struct_fields`](https://github.com/rust-lang/rust/pull/95977/), similar to the existing warning for unused struct fields. This lint will become warn-by-default in the future.
  Compiler
--------
- [Add Nintendo Switch as tier 3 target](https://github.com/rust-lang/rust/pull/88991/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Only compile `#[used]` as llvm.compiler.used for ELF targets](https://github.com/rust-lang/rust/pull/93718/)
- [Add the `--diagnostic-width` compiler flag to define the terminal width.](https://github.com/rust-lang/rust/pull/95635/)
- [Add support for link-flavor `rust-lld` for iOS, tvOS and watchOS](https://github.com/rust-lang/rust/pull/98771/)
  Libraries
---------
- [Remove restrictions on compare-exchange memory ordering.](https://github.com/rust-lang/rust/pull/98383/)
- You can now `write!` or `writeln!` into an `OsString`: [Implement `fmt::Write` for `OsString`](https://github.com/rust-lang/rust/pull/97915/)
- [Make RwLockReadGuard covariant](https://github.com/rust-lang/rust/pull/96820/)
- [Implement `FusedIterator` for `std::net::[Into]Incoming`](https://github.com/rust-lang/rust/pull/97300/)
- [`impl&lt;T: AsRawFd&gt; AsRawFd for {Arc,Box}&lt;T&gt;`](https://github.com/rust-lang/rust/pull/97437/)
- [`ptr::copy` and `ptr::swap` are doing untyped copies](https://github.com/rust-lang/rust/pull/97712/)
- [Add cgroupv1 support to `available_parallelism`](https://github.com/rust-lang/rust/pull/97925/)
- [Mitigate many incorrect uses of `mem::uninitialized`](https://github.com/rust-lang/rust/pull/99182/)
  Stabilized APIs
- [`future::IntoFuture`](https://doc.rust-lang.org/stable/std/future/trait.IntoFuture.html)
- [`future::poll_fn`](https://doc.rust-lang.org/stable/std/future/fn.poll_fn.html)
- [`task::ready!`](https://doc.rust-lang.org/stable/std/task/macro.ready.html)
- [`num::NonZero*::checked_mul`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_mul)
- [`num::NonZero*::checked_pow`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_pow)
- [`num::NonZero*::saturating_mul`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_mul)
- [`num::NonZero*::saturating_pow`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_pow)
- [`num::NonZeroI*::abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.abs)
- [`num::NonZeroI*::checked_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.checked_abs)
- [`num::NonZeroI*::overflowing_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.overflowing_abs)
- [`num::NonZeroI*::saturating_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.saturating_abs)
- [`num::NonZeroI*::unsigned_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.unsigned_abs)
- [`num::NonZeroI*::wrapping_abs`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroIsize.html#method.wrapping_abs)
- [`num::NonZeroU*::checked_add`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_add)
- [`num::NonZeroU*::checked_next_power_of_two`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.checked_next_power_of_two)
- [`num::NonZeroU*::saturating_add`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroUsize.html#method.saturating_add)
- [`os::unix::process::CommandExt::process_group`](https://doc.rust-lang.org/stable/std/os/unix/process/trait.CommandExt.html#tymethod.process_group)
- [`os::windows::fs::FileTypeExt::is_symlink_dir`](https://doc.rust-lang.org/stable/std/os/windows/fs/trait.FileTypeExt.html#tymethod.is_symlink_dir)
- [`os::windows::fs::FileTypeExt::is_symlink_file`](https://doc.rust-lang.org/stable/std/os/windows/fs/trait.FileTypeExt.html#tymethod.is_symlink_file)
  These types were previously stable in `std::ffi`, but are now also available in `core` and `alloc`:
- [`core::ffi::CStr`](https://doc.rust-lang.org/stable/core/ffi/struct.CStr.html)
- [`core::ffi::FromBytesWithNulError`](https://doc.rust-lang.org/stable/core/ffi/struct.FromBytesWithNulError.html)
- [`alloc::ffi::CString`](https://doc.rust-lang.org/stable/alloc/ffi/struct.CString.html)
- [`alloc::ffi::FromVecWithNulError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.FromVecWithNulError.html)
- [`alloc::ffi::IntoStringError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.IntoStringError.html)
- [`alloc::ffi::NulError`](https://doc.rust-lang.org/stable/alloc/ffi/struct.NulError.html)
  These types were previously stable in `std::os::raw`, but are now also available in `core::ffi` and `std::ffi`:
- [`ffi::c_char`](https://doc.rust-lang.org/stable/std/ffi/type.c_char.html)
- [`ffi::c_double`](https://doc.rust-lang.org/stable/std/ffi/type.c_double.html)
- [`ffi::c_float`](https://doc.rust-lang.org/stable/std/ffi/type.c_float.html)
- [`ffi::c_int`](https://doc.rust-lang.org/stable/std/ffi/type.c_int.html)
- [`ffi::c_long`](https://doc.rust-lang.org/stable/std/ffi/type.c_long.html)
- [`ffi::c_longlong`](https://doc.rust-lang.org/stable/std/ffi/type.c_longlong.html)
- [`ffi::c_schar`](https://doc.rust-lang.org/stable/std/ffi/type.c_schar.html)
- [`ffi::c_short`](https://doc.rust-lang.org/stable/std/ffi/type.c_short.html)
- [`ffi::c_uchar`](https://doc.rust-lang.org/stable/std/ffi/type.c_uchar.html)
- [`ffi::c_uint`](https://doc.rust-lang.org/stable/std/ffi/type.c_uint.html)
- [`ffi::c_ulong`](https://doc.rust-lang.org/stable/std/ffi/type.c_ulong.html)
- [`ffi::c_ulonglong`](https://doc.rust-lang.org/stable/std/ffi/type.c_ulonglong.html)
- [`ffi::c_ushort`](https://doc.rust-lang.org/stable/std/ffi/type.c_ushort.html)
  These APIs are now usable in const contexts:
- [`slice::from_raw_parts`](https://doc.rust-lang.org/stable/core/slice/fn.from_raw_parts.html)
  Cargo
-----
- [Packages can now inherit settings from the workspace so that the settings
  can be centralized in one place.](https://github.com/rust-lang/cargo/pull/10859) See
  [`workspace.package`](https://doc.rust-lang.org/nightly/cargo/reference/workspaces.html#the-workspacepackage-table)
  and
  [`workspace.dependencies`](https://doc.rust-lang.org/nightly/cargo/reference/workspaces.html#the-workspacedependencies-table)
  for more details on how to define these common settings.
- [Cargo commands can now accept multiple `--target` flags to build for
  multiple targets at once](https://github.com/rust-lang/cargo/pull/10766), and the
  [`build.target`](https://doc.rust-lang.org/nightly/cargo/reference/config.html#buildtarget)
  config option may now take an array of multiple targets.
- [The `--jobs` argument can now take a negative number to count backwards from
  the max CPUs.](https://github.com/rust-lang/cargo/pull/10844)
- [`cargo add` will now update `Cargo.lock`.](https://github.com/rust-lang/cargo/pull/10902)
- [Added](https://github.com/rust-lang/cargo/pull/10838) the
  [`--crate-type`](https://doc.rust-lang.org/nightly/cargo/commands/cargo-rustc.html#option-cargo-rustc---crate-type)
  flag to `cargo rustc` to override the crate type.
- [Significantly improved the performance fetching git dependencies from GitHub
  when using a hash in the `rev` field.](https://github.com/rust-lang/cargo/pull/10079)
  Misc
----
- [The `rust-analyzer` rustup component is now available on the stable channel.](https://github.com/rust-lang/rust/pull/98640/)
  Compatibility Notes
- The minimum required versions for all `-linux-gnu` targets are now at least kernel 3.2 and glibc 2.17, for targets that previously supported older versions: [Increase the minimum linux-gnu versions](https://github.com/rust-lang/rust/pull/95026/)
- [Network primitives are now implemented with the ideal Rust layout, not the C system layout](https://github.com/rust-lang/rust/pull/78802/). This can cause problems when transmuting the types.
- [Add assertion that `transmute_copy`'s `U` is not larger than `T`](https://github.com/rust-lang/rust/pull/98839/)
- [A soundness bug in `BTreeMap` was fixed](https://github.com/rust-lang/rust/pull/99413/) that allowed data it was borrowing to be dropped before the container.
- [The Drop behavior of C-like enums cast to ints has changed](https://github.com/rust-lang/rust/pull/96862/). These are already discouraged by a compiler warning.
- [Relate late-bound closure lifetimes to parent fn in NLL](https://github.com/rust-lang/rust/pull/98835/)
- [Errors at const-eval time are now in future incompatibility reports](https://github.com/rust-lang/rust/pull/97743/)
- On the `thumbv6m-none-eabi` target, some incorrect `asm!` statements were erroneously accepted if they used the high registers (r8 to r14) as an input/output operand. [This is no longer accepted](https://github.com/rust-lang/rust/pull/99155/).
- [`impl Trait` was accidentally accepted as the associated type value of return-position `impl Trait`](https://github.com/rust-lang/rust/pull/97346/), without fulfilling all the trait bounds of that associated type, as long as the hidden type satisfies said bounds. This has been fixed.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664539200">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1664884800">- Fix missing libexec move for tools
- Repair linker path for cxx build</changelog>
</package>
<package pkgid="93b7b6c2d18b94a693acd9539cd5006c2e86d6eedef78d347132e8bf4b735349" name="cargo1.65" arch="aarch64">
  <version epoch="0" ver="1.65.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">Version 1.65.0 (2022-11-03)
  Language
--------
- [Error on `as` casts of enums with `#[non_exhaustive]` variants](https://github.com/rust-lang/rust/pull/92744/)
- [Stabilize `let else`](https://github.com/rust-lang/rust/pull/93628/)
- [Stabilize generic associated types (GATs)](https://github.com/rust-lang/rust/pull/96709/)
- [Add lints `let_underscore_drop`, `let_underscore_lock`, and `let_underscore_must_use` from Clippy](https://github.com/rust-lang/rust/pull/97739/)
- [Stabilize `break`ing from arbitrary labeled blocks ("label-break-value")](https://github.com/rust-lang/rust/pull/99332/)
- [Uninitialized integers, floats, and raw pointers are now considered immediate UB](https://github.com/rust-lang/rust/pull/98919/).
  Usage of `MaybeUninit` is the correct way to work with uninitialized memory.
- [Stabilize raw-dylib for Windows x86_64, aarch64, and thumbv7a](https://github.com/rust-lang/rust/pull/99916/)
- [Do not allow `Drop` impl on foreign ADTs](https://github.com/rust-lang/rust/pull/99576/)
  Compiler
--------
- [Stabilize -Csplit-debuginfo on Linux](https://github.com/rust-lang/rust/pull/98051/)
- [Use niche-filling optimization even when multiple variants have data](https://github.com/rust-lang/rust/pull/94075/)
- [Associated type projections are now verified to be well-formed prior to resolving the underlying type](https://github.com/rust-lang/rust/pull/99217/#issuecomment-1209365630)
- [Stringify non-shorthand visibility correctly](https://github.com/rust-lang/rust/pull/100350/)
- [Normalize struct field types when unsizing](https://github.com/rust-lang/rust/pull/101831/)
- [Update to LLVM 15](https://github.com/rust-lang/rust/pull/99464/)
- [Fix aarch64 call abi to correctly zeroext when needed](https://github.com/rust-lang/rust/pull/97800/)
- [debuginfo: Generalize C++-like encoding for enums](https://github.com/rust-lang/rust/pull/98393/)
- [Add `special_module_name` lint](https://github.com/rust-lang/rust/pull/94467/)
- [Add support for generating unique profraw files by default when using `-C instrument-coverage`](https://github.com/rust-lang/rust/pull/100384/)
- [Allow dynamic linking for iOS/tvOS targets](https://github.com/rust-lang/rust/pull/100636/)
  New targets:
- [Add armv4t-none-eabi as a tier 3 target](https://github.com/rust-lang/rust/pull/100244/)
- [Add powerpc64-unknown-openbsd and riscv64-unknown-openbsd as tier 3 targets](https://github.com/rust-lang/rust/pull/101025/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  Libraries
---------
- [Don't generate `PartialEq::ne` in derive(PartialEq)](https://github.com/rust-lang/rust/pull/98655/)
- [Windows RNG: Use `BCRYPT_RNG_ALG_HANDLE` by default](https://github.com/rust-lang/rust/pull/101325/)
- [Forbid mixing `System` with direct system allocator calls](https://github.com/rust-lang/rust/pull/101394/)
- [Document no support for writing to non-blocking stdio/stderr](https://github.com/rust-lang/rust/pull/101416/)
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295)
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
  Stabilized APIs
- [`std::backtrace::Backtrace`](https://doc.rust-lang.org/stable/std/backtrace/struct.Backtrace.html)
- [`Bound::as_ref`](https://doc.rust-lang.org/stable/std/ops/enum.Bound.html#method.as_ref)
- [`std::io::read_to_string`](https://doc.rust-lang.org/stable/std/io/fn.read_to_string.html)
- [`&lt;*const T&gt;::cast_mut`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_mut)
- [`&lt;*mut T&gt;::cast_const`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_const)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
- [`&lt;*mut T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
  Cargo
-----
- [Apply GitHub fast path even for partial hashes](https://github.com/rust-lang/cargo/pull/10807/)
- [Do not add home bin path to PATH if it's already there](https://github.com/rust-lang/cargo/pull/11023/)
- [Take priority into account within the pending queue](https://github.com/rust-lang/cargo/pull/11032/).
  This slightly optimizes job scheduling by Cargo, with typically small improvements on larger crate graph builds.
  Compatibility Notes
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295).
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
- [`PollFn` now only implements `Unpin` if the closure is `Unpin`](https://github.com/rust-lang/rust/pull/102737).
  This is a possible breaking change if users were relying on the blanket unpin implementation.
  See discussion on the PR for details of why this change was made.
- [Drop ExactSizeIterator impl from std::char::EscapeAscii](https://github.com/rust-lang/rust/pull/99880)
  This is a backwards-incompatible change to the standard library's surface
  area, but is unlikely to affect real world usage.
- [Do not consider a single repeated lifetime eligible for elision in the return type](https://github.com/rust-lang/rust/pull/103450)
  This behavior was unintentionally changed in 1.64.0, and this release reverts that change by making this an error again.
- [Reenable disabled early syntax gates as future-incompatibility lints](https://github.com/rust-lang/rust/pull/99935/)
- [Update the minimum external LLVM to 13](https://github.com/rust-lang/rust/pull/100460/)
- [Don't duplicate file descriptors into stdio fds](https://github.com/rust-lang/rust/pull/101426/)
- [Sunset RLS](https://github.com/rust-lang/rust/pull/100863/)
- [Deny usage of `#![cfg_attr(..., crate_type = ...)]` to set the crate type](https://github.com/rust-lang/rust/pull/99784/)
  This strengthens the forward compatibility lint deprecated_cfg_attr_crate_type_name to deny.
- [`llvm-has-rust-patches` allows setting the build system to treat the LLVM as having Rust-specific patches](https://github.com/rust-lang/rust/pull/101072)
  This option may need to be set for distributions that are building Rust with a patched LLVM via `llvm-config`, not the built-in LLVM.</changelog>
  <changelog author="william.brown@suse.com" date="1667822400">- Fix CI test fix that OBS removed</changelog>
  <changelog author="william.brown@suse.com" date="1667908800">- Fix incorrect SLE/Leap version check for gcc</changelog>
</package>
<package pkgid="e3987cfbf9df588a3910fcaecd918700fde89f8aff4a306e50306f740f5e612e" name="cargo1.65" arch="ppc64le">
  <version epoch="0" ver="1.65.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">Version 1.65.0 (2022-11-03)
  Language
--------
- [Error on `as` casts of enums with `#[non_exhaustive]` variants](https://github.com/rust-lang/rust/pull/92744/)
- [Stabilize `let else`](https://github.com/rust-lang/rust/pull/93628/)
- [Stabilize generic associated types (GATs)](https://github.com/rust-lang/rust/pull/96709/)
- [Add lints `let_underscore_drop`, `let_underscore_lock`, and `let_underscore_must_use` from Clippy](https://github.com/rust-lang/rust/pull/97739/)
- [Stabilize `break`ing from arbitrary labeled blocks ("label-break-value")](https://github.com/rust-lang/rust/pull/99332/)
- [Uninitialized integers, floats, and raw pointers are now considered immediate UB](https://github.com/rust-lang/rust/pull/98919/).
  Usage of `MaybeUninit` is the correct way to work with uninitialized memory.
- [Stabilize raw-dylib for Windows x86_64, aarch64, and thumbv7a](https://github.com/rust-lang/rust/pull/99916/)
- [Do not allow `Drop` impl on foreign ADTs](https://github.com/rust-lang/rust/pull/99576/)
  Compiler
--------
- [Stabilize -Csplit-debuginfo on Linux](https://github.com/rust-lang/rust/pull/98051/)
- [Use niche-filling optimization even when multiple variants have data](https://github.com/rust-lang/rust/pull/94075/)
- [Associated type projections are now verified to be well-formed prior to resolving the underlying type](https://github.com/rust-lang/rust/pull/99217/#issuecomment-1209365630)
- [Stringify non-shorthand visibility correctly](https://github.com/rust-lang/rust/pull/100350/)
- [Normalize struct field types when unsizing](https://github.com/rust-lang/rust/pull/101831/)
- [Update to LLVM 15](https://github.com/rust-lang/rust/pull/99464/)
- [Fix aarch64 call abi to correctly zeroext when needed](https://github.com/rust-lang/rust/pull/97800/)
- [debuginfo: Generalize C++-like encoding for enums](https://github.com/rust-lang/rust/pull/98393/)
- [Add `special_module_name` lint](https://github.com/rust-lang/rust/pull/94467/)
- [Add support for generating unique profraw files by default when using `-C instrument-coverage`](https://github.com/rust-lang/rust/pull/100384/)
- [Allow dynamic linking for iOS/tvOS targets](https://github.com/rust-lang/rust/pull/100636/)
  New targets:
- [Add armv4t-none-eabi as a tier 3 target](https://github.com/rust-lang/rust/pull/100244/)
- [Add powerpc64-unknown-openbsd and riscv64-unknown-openbsd as tier 3 targets](https://github.com/rust-lang/rust/pull/101025/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  Libraries
---------
- [Don't generate `PartialEq::ne` in derive(PartialEq)](https://github.com/rust-lang/rust/pull/98655/)
- [Windows RNG: Use `BCRYPT_RNG_ALG_HANDLE` by default](https://github.com/rust-lang/rust/pull/101325/)
- [Forbid mixing `System` with direct system allocator calls](https://github.com/rust-lang/rust/pull/101394/)
- [Document no support for writing to non-blocking stdio/stderr](https://github.com/rust-lang/rust/pull/101416/)
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295)
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
  Stabilized APIs
- [`std::backtrace::Backtrace`](https://doc.rust-lang.org/stable/std/backtrace/struct.Backtrace.html)
- [`Bound::as_ref`](https://doc.rust-lang.org/stable/std/ops/enum.Bound.html#method.as_ref)
- [`std::io::read_to_string`](https://doc.rust-lang.org/stable/std/io/fn.read_to_string.html)
- [`&lt;*const T&gt;::cast_mut`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_mut)
- [`&lt;*mut T&gt;::cast_const`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_const)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
- [`&lt;*mut T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
  Cargo
-----
- [Apply GitHub fast path even for partial hashes](https://github.com/rust-lang/cargo/pull/10807/)
- [Do not add home bin path to PATH if it's already there](https://github.com/rust-lang/cargo/pull/11023/)
- [Take priority into account within the pending queue](https://github.com/rust-lang/cargo/pull/11032/).
  This slightly optimizes job scheduling by Cargo, with typically small improvements on larger crate graph builds.
  Compatibility Notes
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295).
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
- [`PollFn` now only implements `Unpin` if the closure is `Unpin`](https://github.com/rust-lang/rust/pull/102737).
  This is a possible breaking change if users were relying on the blanket unpin implementation.
  See discussion on the PR for details of why this change was made.
- [Drop ExactSizeIterator impl from std::char::EscapeAscii](https://github.com/rust-lang/rust/pull/99880)
  This is a backwards-incompatible change to the standard library's surface
  area, but is unlikely to affect real world usage.
- [Do not consider a single repeated lifetime eligible for elision in the return type](https://github.com/rust-lang/rust/pull/103450)
  This behavior was unintentionally changed in 1.64.0, and this release reverts that change by making this an error again.
- [Reenable disabled early syntax gates as future-incompatibility lints](https://github.com/rust-lang/rust/pull/99935/)
- [Update the minimum external LLVM to 13](https://github.com/rust-lang/rust/pull/100460/)
- [Don't duplicate file descriptors into stdio fds](https://github.com/rust-lang/rust/pull/101426/)
- [Sunset RLS](https://github.com/rust-lang/rust/pull/100863/)
- [Deny usage of `#![cfg_attr(..., crate_type = ...)]` to set the crate type](https://github.com/rust-lang/rust/pull/99784/)
  This strengthens the forward compatibility lint deprecated_cfg_attr_crate_type_name to deny.
- [`llvm-has-rust-patches` allows setting the build system to treat the LLVM as having Rust-specific patches](https://github.com/rust-lang/rust/pull/101072)
  This option may need to be set for distributions that are building Rust with a patched LLVM via `llvm-config`, not the built-in LLVM.</changelog>
  <changelog author="william.brown@suse.com" date="1667822400">- Fix CI test fix that OBS removed</changelog>
  <changelog author="william.brown@suse.com" date="1667908800">- Fix incorrect SLE/Leap version check for gcc</changelog>
</package>
<package pkgid="1a48372dec4a5ed5101e994706914391a5876d7f96eb6623d6fe50c9c2e596d2" name="cargo1.65" arch="s390x">
  <version epoch="0" ver="1.65.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">Version 1.65.0 (2022-11-03)
  Language
--------
- [Error on `as` casts of enums with `#[non_exhaustive]` variants](https://github.com/rust-lang/rust/pull/92744/)
- [Stabilize `let else`](https://github.com/rust-lang/rust/pull/93628/)
- [Stabilize generic associated types (GATs)](https://github.com/rust-lang/rust/pull/96709/)
- [Add lints `let_underscore_drop`, `let_underscore_lock`, and `let_underscore_must_use` from Clippy](https://github.com/rust-lang/rust/pull/97739/)
- [Stabilize `break`ing from arbitrary labeled blocks ("label-break-value")](https://github.com/rust-lang/rust/pull/99332/)
- [Uninitialized integers, floats, and raw pointers are now considered immediate UB](https://github.com/rust-lang/rust/pull/98919/).
  Usage of `MaybeUninit` is the correct way to work with uninitialized memory.
- [Stabilize raw-dylib for Windows x86_64, aarch64, and thumbv7a](https://github.com/rust-lang/rust/pull/99916/)
- [Do not allow `Drop` impl on foreign ADTs](https://github.com/rust-lang/rust/pull/99576/)
  Compiler
--------
- [Stabilize -Csplit-debuginfo on Linux](https://github.com/rust-lang/rust/pull/98051/)
- [Use niche-filling optimization even when multiple variants have data](https://github.com/rust-lang/rust/pull/94075/)
- [Associated type projections are now verified to be well-formed prior to resolving the underlying type](https://github.com/rust-lang/rust/pull/99217/#issuecomment-1209365630)
- [Stringify non-shorthand visibility correctly](https://github.com/rust-lang/rust/pull/100350/)
- [Normalize struct field types when unsizing](https://github.com/rust-lang/rust/pull/101831/)
- [Update to LLVM 15](https://github.com/rust-lang/rust/pull/99464/)
- [Fix aarch64 call abi to correctly zeroext when needed](https://github.com/rust-lang/rust/pull/97800/)
- [debuginfo: Generalize C++-like encoding for enums](https://github.com/rust-lang/rust/pull/98393/)
- [Add `special_module_name` lint](https://github.com/rust-lang/rust/pull/94467/)
- [Add support for generating unique profraw files by default when using `-C instrument-coverage`](https://github.com/rust-lang/rust/pull/100384/)
- [Allow dynamic linking for iOS/tvOS targets](https://github.com/rust-lang/rust/pull/100636/)
  New targets:
- [Add armv4t-none-eabi as a tier 3 target](https://github.com/rust-lang/rust/pull/100244/)
- [Add powerpc64-unknown-openbsd and riscv64-unknown-openbsd as tier 3 targets](https://github.com/rust-lang/rust/pull/101025/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  Libraries
---------
- [Don't generate `PartialEq::ne` in derive(PartialEq)](https://github.com/rust-lang/rust/pull/98655/)
- [Windows RNG: Use `BCRYPT_RNG_ALG_HANDLE` by default](https://github.com/rust-lang/rust/pull/101325/)
- [Forbid mixing `System` with direct system allocator calls](https://github.com/rust-lang/rust/pull/101394/)
- [Document no support for writing to non-blocking stdio/stderr](https://github.com/rust-lang/rust/pull/101416/)
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295)
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
  Stabilized APIs
- [`std::backtrace::Backtrace`](https://doc.rust-lang.org/stable/std/backtrace/struct.Backtrace.html)
- [`Bound::as_ref`](https://doc.rust-lang.org/stable/std/ops/enum.Bound.html#method.as_ref)
- [`std::io::read_to_string`](https://doc.rust-lang.org/stable/std/io/fn.read_to_string.html)
- [`&lt;*const T&gt;::cast_mut`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_mut)
- [`&lt;*mut T&gt;::cast_const`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_const)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
- [`&lt;*mut T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
  Cargo
-----
- [Apply GitHub fast path even for partial hashes](https://github.com/rust-lang/cargo/pull/10807/)
- [Do not add home bin path to PATH if it's already there](https://github.com/rust-lang/cargo/pull/11023/)
- [Take priority into account within the pending queue](https://github.com/rust-lang/cargo/pull/11032/).
  This slightly optimizes job scheduling by Cargo, with typically small improvements on larger crate graph builds.
  Compatibility Notes
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295).
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
- [`PollFn` now only implements `Unpin` if the closure is `Unpin`](https://github.com/rust-lang/rust/pull/102737).
  This is a possible breaking change if users were relying on the blanket unpin implementation.
  See discussion on the PR for details of why this change was made.
- [Drop ExactSizeIterator impl from std::char::EscapeAscii](https://github.com/rust-lang/rust/pull/99880)
  This is a backwards-incompatible change to the standard library's surface
  area, but is unlikely to affect real world usage.
- [Do not consider a single repeated lifetime eligible for elision in the return type](https://github.com/rust-lang/rust/pull/103450)
  This behavior was unintentionally changed in 1.64.0, and this release reverts that change by making this an error again.
- [Reenable disabled early syntax gates as future-incompatibility lints](https://github.com/rust-lang/rust/pull/99935/)
- [Update the minimum external LLVM to 13](https://github.com/rust-lang/rust/pull/100460/)
- [Don't duplicate file descriptors into stdio fds](https://github.com/rust-lang/rust/pull/101426/)
- [Sunset RLS](https://github.com/rust-lang/rust/pull/100863/)
- [Deny usage of `#![cfg_attr(..., crate_type = ...)]` to set the crate type](https://github.com/rust-lang/rust/pull/99784/)
  This strengthens the forward compatibility lint deprecated_cfg_attr_crate_type_name to deny.
- [`llvm-has-rust-patches` allows setting the build system to treat the LLVM as having Rust-specific patches](https://github.com/rust-lang/rust/pull/101072)
  This option may need to be set for distributions that are building Rust with a patched LLVM via `llvm-config`, not the built-in LLVM.</changelog>
  <changelog author="william.brown@suse.com" date="1667822400">- Fix CI test fix that OBS removed</changelog>
  <changelog author="william.brown@suse.com" date="1667908800">- Fix incorrect SLE/Leap version check for gcc</changelog>
</package>
<package pkgid="685d8dd00af12e6a5794911f2a210f51f8934fccf4355956cc2e593b5030b7dd" name="cargo1.65" arch="x86_64">
  <version epoch="0" ver="1.65.0" rel="150300.7.3.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">Version 1.65.0 (2022-11-03)
  Language
--------
- [Error on `as` casts of enums with `#[non_exhaustive]` variants](https://github.com/rust-lang/rust/pull/92744/)
- [Stabilize `let else`](https://github.com/rust-lang/rust/pull/93628/)
- [Stabilize generic associated types (GATs)](https://github.com/rust-lang/rust/pull/96709/)
- [Add lints `let_underscore_drop`, `let_underscore_lock`, and `let_underscore_must_use` from Clippy](https://github.com/rust-lang/rust/pull/97739/)
- [Stabilize `break`ing from arbitrary labeled blocks ("label-break-value")](https://github.com/rust-lang/rust/pull/99332/)
- [Uninitialized integers, floats, and raw pointers are now considered immediate UB](https://github.com/rust-lang/rust/pull/98919/).
  Usage of `MaybeUninit` is the correct way to work with uninitialized memory.
- [Stabilize raw-dylib for Windows x86_64, aarch64, and thumbv7a](https://github.com/rust-lang/rust/pull/99916/)
- [Do not allow `Drop` impl on foreign ADTs](https://github.com/rust-lang/rust/pull/99576/)
  Compiler
--------
- [Stabilize -Csplit-debuginfo on Linux](https://github.com/rust-lang/rust/pull/98051/)
- [Use niche-filling optimization even when multiple variants have data](https://github.com/rust-lang/rust/pull/94075/)
- [Associated type projections are now verified to be well-formed prior to resolving the underlying type](https://github.com/rust-lang/rust/pull/99217/#issuecomment-1209365630)
- [Stringify non-shorthand visibility correctly](https://github.com/rust-lang/rust/pull/100350/)
- [Normalize struct field types when unsizing](https://github.com/rust-lang/rust/pull/101831/)
- [Update to LLVM 15](https://github.com/rust-lang/rust/pull/99464/)
- [Fix aarch64 call abi to correctly zeroext when needed](https://github.com/rust-lang/rust/pull/97800/)
- [debuginfo: Generalize C++-like encoding for enums](https://github.com/rust-lang/rust/pull/98393/)
- [Add `special_module_name` lint](https://github.com/rust-lang/rust/pull/94467/)
- [Add support for generating unique profraw files by default when using `-C instrument-coverage`](https://github.com/rust-lang/rust/pull/100384/)
- [Allow dynamic linking for iOS/tvOS targets](https://github.com/rust-lang/rust/pull/100636/)
  New targets:
- [Add armv4t-none-eabi as a tier 3 target](https://github.com/rust-lang/rust/pull/100244/)
- [Add powerpc64-unknown-openbsd and riscv64-unknown-openbsd as tier 3 targets](https://github.com/rust-lang/rust/pull/101025/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  Libraries
---------
- [Don't generate `PartialEq::ne` in derive(PartialEq)](https://github.com/rust-lang/rust/pull/98655/)
- [Windows RNG: Use `BCRYPT_RNG_ALG_HANDLE` by default](https://github.com/rust-lang/rust/pull/101325/)
- [Forbid mixing `System` with direct system allocator calls](https://github.com/rust-lang/rust/pull/101394/)
- [Document no support for writing to non-blocking stdio/stderr](https://github.com/rust-lang/rust/pull/101416/)
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295)
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
  Stabilized APIs
- [`std::backtrace::Backtrace`](https://doc.rust-lang.org/stable/std/backtrace/struct.Backtrace.html)
- [`Bound::as_ref`](https://doc.rust-lang.org/stable/std/ops/enum.Bound.html#method.as_ref)
- [`std::io::read_to_string`](https://doc.rust-lang.org/stable/std/io/fn.read_to_string.html)
- [`&lt;*const T&gt;::cast_mut`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_mut)
- [`&lt;*mut T&gt;::cast_const`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_const)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
- [`&lt;*mut T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
  Cargo
-----
- [Apply GitHub fast path even for partial hashes](https://github.com/rust-lang/cargo/pull/10807/)
- [Do not add home bin path to PATH if it's already there](https://github.com/rust-lang/cargo/pull/11023/)
- [Take priority into account within the pending queue](https://github.com/rust-lang/cargo/pull/11032/).
  This slightly optimizes job scheduling by Cargo, with typically small improvements on larger crate graph builds.
  Compatibility Notes
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295).
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
- [`PollFn` now only implements `Unpin` if the closure is `Unpin`](https://github.com/rust-lang/rust/pull/102737).
  This is a possible breaking change if users were relying on the blanket unpin implementation.
  See discussion on the PR for details of why this change was made.
- [Drop ExactSizeIterator impl from std::char::EscapeAscii](https://github.com/rust-lang/rust/pull/99880)
  This is a backwards-incompatible change to the standard library's surface
  area, but is unlikely to affect real world usage.
- [Do not consider a single repeated lifetime eligible for elision in the return type](https://github.com/rust-lang/rust/pull/103450)
  This behavior was unintentionally changed in 1.64.0, and this release reverts that change by making this an error again.
- [Reenable disabled early syntax gates as future-incompatibility lints](https://github.com/rust-lang/rust/pull/99935/)
- [Update the minimum external LLVM to 13](https://github.com/rust-lang/rust/pull/100460/)
- [Don't duplicate file descriptors into stdio fds](https://github.com/rust-lang/rust/pull/101426/)
- [Sunset RLS](https://github.com/rust-lang/rust/pull/100863/)
- [Deny usage of `#![cfg_attr(..., crate_type = ...)]` to set the crate type](https://github.com/rust-lang/rust/pull/99784/)
  This strengthens the forward compatibility lint deprecated_cfg_attr_crate_type_name to deny.
- [`llvm-has-rust-patches` allows setting the build system to treat the LLVM as having Rust-specific patches](https://github.com/rust-lang/rust/pull/101072)
  This option may need to be set for distributions that are building Rust with a patched LLVM via `llvm-config`, not the built-in LLVM.</changelog>
  <changelog author="william.brown@suse.com" date="1667822400">- Fix CI test fix that OBS removed</changelog>
  <changelog author="william.brown@suse.com" date="1667908800">- Fix incorrect SLE/Leap version check for gcc</changelog>
</package>
<package pkgid="3f6a23cf4406e1713f6224ee56e329ed366eed1848113de9d0ea9566177d556f" name="cargo1.65" arch="aarch64">
  <version epoch="0" ver="1.65.0" rel="150300.7.9.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">Version 1.65.0 (2022-11-03)
  Language
--------
- [Error on `as` casts of enums with `#[non_exhaustive]` variants](https://github.com/rust-lang/rust/pull/92744/)
- [Stabilize `let else`](https://github.com/rust-lang/rust/pull/93628/)
- [Stabilize generic associated types (GATs)](https://github.com/rust-lang/rust/pull/96709/)
- [Add lints `let_underscore_drop`, `let_underscore_lock`, and `let_underscore_must_use` from Clippy](https://github.com/rust-lang/rust/pull/97739/)
- [Stabilize `break`ing from arbitrary labeled blocks ("label-break-value")](https://github.com/rust-lang/rust/pull/99332/)
- [Uninitialized integers, floats, and raw pointers are now considered immediate UB](https://github.com/rust-lang/rust/pull/98919/).
  Usage of `MaybeUninit` is the correct way to work with uninitialized memory.
- [Stabilize raw-dylib for Windows x86_64, aarch64, and thumbv7a](https://github.com/rust-lang/rust/pull/99916/)
- [Do not allow `Drop` impl on foreign ADTs](https://github.com/rust-lang/rust/pull/99576/)
  Compiler
--------
- [Stabilize -Csplit-debuginfo on Linux](https://github.com/rust-lang/rust/pull/98051/)
- [Use niche-filling optimization even when multiple variants have data](https://github.com/rust-lang/rust/pull/94075/)
- [Associated type projections are now verified to be well-formed prior to resolving the underlying type](https://github.com/rust-lang/rust/pull/99217/#issuecomment-1209365630)
- [Stringify non-shorthand visibility correctly](https://github.com/rust-lang/rust/pull/100350/)
- [Normalize struct field types when unsizing](https://github.com/rust-lang/rust/pull/101831/)
- [Update to LLVM 15](https://github.com/rust-lang/rust/pull/99464/)
- [Fix aarch64 call abi to correctly zeroext when needed](https://github.com/rust-lang/rust/pull/97800/)
- [debuginfo: Generalize C++-like encoding for enums](https://github.com/rust-lang/rust/pull/98393/)
- [Add `special_module_name` lint](https://github.com/rust-lang/rust/pull/94467/)
- [Add support for generating unique profraw files by default when using `-C instrument-coverage`](https://github.com/rust-lang/rust/pull/100384/)
- [Allow dynamic linking for iOS/tvOS targets](https://github.com/rust-lang/rust/pull/100636/)
  New targets:
- [Add armv4t-none-eabi as a tier 3 target](https://github.com/rust-lang/rust/pull/100244/)
- [Add powerpc64-unknown-openbsd and riscv64-unknown-openbsd as tier 3 targets](https://github.com/rust-lang/rust/pull/101025/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  Libraries
---------
- [Don't generate `PartialEq::ne` in derive(PartialEq)](https://github.com/rust-lang/rust/pull/98655/)
- [Windows RNG: Use `BCRYPT_RNG_ALG_HANDLE` by default](https://github.com/rust-lang/rust/pull/101325/)
- [Forbid mixing `System` with direct system allocator calls](https://github.com/rust-lang/rust/pull/101394/)
- [Document no support for writing to non-blocking stdio/stderr](https://github.com/rust-lang/rust/pull/101416/)
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295)
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
  Stabilized APIs
- [`std::backtrace::Backtrace`](https://doc.rust-lang.org/stable/std/backtrace/struct.Backtrace.html)
- [`Bound::as_ref`](https://doc.rust-lang.org/stable/std/ops/enum.Bound.html#method.as_ref)
- [`std::io::read_to_string`](https://doc.rust-lang.org/stable/std/io/fn.read_to_string.html)
- [`&lt;*const T&gt;::cast_mut`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_mut)
- [`&lt;*mut T&gt;::cast_const`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_const)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
- [`&lt;*mut T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
  Cargo
-----
- [Apply GitHub fast path even for partial hashes](https://github.com/rust-lang/cargo/pull/10807/)
- [Do not add home bin path to PATH if it's already there](https://github.com/rust-lang/cargo/pull/11023/)
- [Take priority into account within the pending queue](https://github.com/rust-lang/cargo/pull/11032/).
  This slightly optimizes job scheduling by Cargo, with typically small improvements on larger crate graph builds.
  Compatibility Notes
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295).
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
- [`PollFn` now only implements `Unpin` if the closure is `Unpin`](https://github.com/rust-lang/rust/pull/102737).
  This is a possible breaking change if users were relying on the blanket unpin implementation.
  See discussion on the PR for details of why this change was made.
- [Drop ExactSizeIterator impl from std::char::EscapeAscii](https://github.com/rust-lang/rust/pull/99880)
  This is a backwards-incompatible change to the standard library's surface
  area, but is unlikely to affect real world usage.
- [Do not consider a single repeated lifetime eligible for elision in the return type](https://github.com/rust-lang/rust/pull/103450)
  This behavior was unintentionally changed in 1.64.0, and this release reverts that change by making this an error again.
- [Reenable disabled early syntax gates as future-incompatibility lints](https://github.com/rust-lang/rust/pull/99935/)
- [Update the minimum external LLVM to 13](https://github.com/rust-lang/rust/pull/100460/)
- [Don't duplicate file descriptors into stdio fds](https://github.com/rust-lang/rust/pull/101426/)
- [Sunset RLS](https://github.com/rust-lang/rust/pull/100863/)
- [Deny usage of `#![cfg_attr(..., crate_type = ...)]` to set the crate type](https://github.com/rust-lang/rust/pull/99784/)
  This strengthens the forward compatibility lint deprecated_cfg_attr_crate_type_name to deny.
- [`llvm-has-rust-patches` allows setting the build system to treat the LLVM as having Rust-specific patches](https://github.com/rust-lang/rust/pull/101072)
  This option may need to be set for distributions that are building Rust with a patched LLVM via `llvm-config`, not the built-in LLVM.</changelog>
  <changelog author="william.brown@suse.com" date="1667822400">- Fix CI test fix that OBS removed</changelog>
  <changelog author="william.brown@suse.com" date="1667908800">- Fix incorrect SLE/Leap version check for gcc</changelog>
  <changelog author="aplanas@suse.com" date="1667995200">- Drop .cargo/config creation as a workaround for vendored components
  https://github.com/rust-lang/rust/issues/90764</changelog>
  <changelog author="aplanas@suse.com" date="1669982400">- Add NoSource for the bootstrap compilers.  This generate a nosrc.rpm
  that contains only the src.tar.xz
  + According to the documentation NoSource can be a list of
    space-separated numbers, but the source code of the RPM
    parseUnsignedNum (buid/misc.c) should that this is not the case.</changelog>
  <changelog author="william.brown@suse.com" date="1673352000">- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
  * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch
  * 0002-Rebuild-Cargo.lock.patch</changelog>
</package>
<package pkgid="455bf8dfc76a057bf27e6ca826ff947c9ca779f1bca52a990422ed21a4bb5612" name="cargo1.65" arch="ppc64le">
  <version epoch="0" ver="1.65.0" rel="150300.7.9.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">Version 1.65.0 (2022-11-03)
  Language
--------
- [Error on `as` casts of enums with `#[non_exhaustive]` variants](https://github.com/rust-lang/rust/pull/92744/)
- [Stabilize `let else`](https://github.com/rust-lang/rust/pull/93628/)
- [Stabilize generic associated types (GATs)](https://github.com/rust-lang/rust/pull/96709/)
- [Add lints `let_underscore_drop`, `let_underscore_lock`, and `let_underscore_must_use` from Clippy](https://github.com/rust-lang/rust/pull/97739/)
- [Stabilize `break`ing from arbitrary labeled blocks ("label-break-value")](https://github.com/rust-lang/rust/pull/99332/)
- [Uninitialized integers, floats, and raw pointers are now considered immediate UB](https://github.com/rust-lang/rust/pull/98919/).
  Usage of `MaybeUninit` is the correct way to work with uninitialized memory.
- [Stabilize raw-dylib for Windows x86_64, aarch64, and thumbv7a](https://github.com/rust-lang/rust/pull/99916/)
- [Do not allow `Drop` impl on foreign ADTs](https://github.com/rust-lang/rust/pull/99576/)
  Compiler
--------
- [Stabilize -Csplit-debuginfo on Linux](https://github.com/rust-lang/rust/pull/98051/)
- [Use niche-filling optimization even when multiple variants have data](https://github.com/rust-lang/rust/pull/94075/)
- [Associated type projections are now verified to be well-formed prior to resolving the underlying type](https://github.com/rust-lang/rust/pull/99217/#issuecomment-1209365630)
- [Stringify non-shorthand visibility correctly](https://github.com/rust-lang/rust/pull/100350/)
- [Normalize struct field types when unsizing](https://github.com/rust-lang/rust/pull/101831/)
- [Update to LLVM 15](https://github.com/rust-lang/rust/pull/99464/)
- [Fix aarch64 call abi to correctly zeroext when needed](https://github.com/rust-lang/rust/pull/97800/)
- [debuginfo: Generalize C++-like encoding for enums](https://github.com/rust-lang/rust/pull/98393/)
- [Add `special_module_name` lint](https://github.com/rust-lang/rust/pull/94467/)
- [Add support for generating unique profraw files by default when using `-C instrument-coverage`](https://github.com/rust-lang/rust/pull/100384/)
- [Allow dynamic linking for iOS/tvOS targets](https://github.com/rust-lang/rust/pull/100636/)
  New targets:
- [Add armv4t-none-eabi as a tier 3 target](https://github.com/rust-lang/rust/pull/100244/)
- [Add powerpc64-unknown-openbsd and riscv64-unknown-openbsd as tier 3 targets](https://github.com/rust-lang/rust/pull/101025/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  Libraries
---------
- [Don't generate `PartialEq::ne` in derive(PartialEq)](https://github.com/rust-lang/rust/pull/98655/)
- [Windows RNG: Use `BCRYPT_RNG_ALG_HANDLE` by default](https://github.com/rust-lang/rust/pull/101325/)
- [Forbid mixing `System` with direct system allocator calls](https://github.com/rust-lang/rust/pull/101394/)
- [Document no support for writing to non-blocking stdio/stderr](https://github.com/rust-lang/rust/pull/101416/)
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295)
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
  Stabilized APIs
- [`std::backtrace::Backtrace`](https://doc.rust-lang.org/stable/std/backtrace/struct.Backtrace.html)
- [`Bound::as_ref`](https://doc.rust-lang.org/stable/std/ops/enum.Bound.html#method.as_ref)
- [`std::io::read_to_string`](https://doc.rust-lang.org/stable/std/io/fn.read_to_string.html)
- [`&lt;*const T&gt;::cast_mut`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_mut)
- [`&lt;*mut T&gt;::cast_const`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_const)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
- [`&lt;*mut T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
  Cargo
-----
- [Apply GitHub fast path even for partial hashes](https://github.com/rust-lang/cargo/pull/10807/)
- [Do not add home bin path to PATH if it's already there](https://github.com/rust-lang/cargo/pull/11023/)
- [Take priority into account within the pending queue](https://github.com/rust-lang/cargo/pull/11032/).
  This slightly optimizes job scheduling by Cargo, with typically small improvements on larger crate graph builds.
  Compatibility Notes
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295).
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
- [`PollFn` now only implements `Unpin` if the closure is `Unpin`](https://github.com/rust-lang/rust/pull/102737).
  This is a possible breaking change if users were relying on the blanket unpin implementation.
  See discussion on the PR for details of why this change was made.
- [Drop ExactSizeIterator impl from std::char::EscapeAscii](https://github.com/rust-lang/rust/pull/99880)
  This is a backwards-incompatible change to the standard library's surface
  area, but is unlikely to affect real world usage.
- [Do not consider a single repeated lifetime eligible for elision in the return type](https://github.com/rust-lang/rust/pull/103450)
  This behavior was unintentionally changed in 1.64.0, and this release reverts that change by making this an error again.
- [Reenable disabled early syntax gates as future-incompatibility lints](https://github.com/rust-lang/rust/pull/99935/)
- [Update the minimum external LLVM to 13](https://github.com/rust-lang/rust/pull/100460/)
- [Don't duplicate file descriptors into stdio fds](https://github.com/rust-lang/rust/pull/101426/)
- [Sunset RLS](https://github.com/rust-lang/rust/pull/100863/)
- [Deny usage of `#![cfg_attr(..., crate_type = ...)]` to set the crate type](https://github.com/rust-lang/rust/pull/99784/)
  This strengthens the forward compatibility lint deprecated_cfg_attr_crate_type_name to deny.
- [`llvm-has-rust-patches` allows setting the build system to treat the LLVM as having Rust-specific patches](https://github.com/rust-lang/rust/pull/101072)
  This option may need to be set for distributions that are building Rust with a patched LLVM via `llvm-config`, not the built-in LLVM.</changelog>
  <changelog author="william.brown@suse.com" date="1667822400">- Fix CI test fix that OBS removed</changelog>
  <changelog author="william.brown@suse.com" date="1667908800">- Fix incorrect SLE/Leap version check for gcc</changelog>
  <changelog author="aplanas@suse.com" date="1667995200">- Drop .cargo/config creation as a workaround for vendored components
  https://github.com/rust-lang/rust/issues/90764</changelog>
  <changelog author="aplanas@suse.com" date="1669982400">- Add NoSource for the bootstrap compilers.  This generate a nosrc.rpm
  that contains only the src.tar.xz
  + According to the documentation NoSource can be a list of
    space-separated numbers, but the source code of the RPM
    parseUnsignedNum (buid/misc.c) should that this is not the case.</changelog>
  <changelog author="william.brown@suse.com" date="1673352000">- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
  * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch
  * 0002-Rebuild-Cargo.lock.patch</changelog>
</package>
<package pkgid="b5bbb55dc1b1cd34069a34ea623a9a0e0fab4f72dc8fc257e6b3de5e1789ae45" name="cargo1.65" arch="s390x">
  <version epoch="0" ver="1.65.0" rel="150300.7.9.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">Version 1.65.0 (2022-11-03)
  Language
--------
- [Error on `as` casts of enums with `#[non_exhaustive]` variants](https://github.com/rust-lang/rust/pull/92744/)
- [Stabilize `let else`](https://github.com/rust-lang/rust/pull/93628/)
- [Stabilize generic associated types (GATs)](https://github.com/rust-lang/rust/pull/96709/)
- [Add lints `let_underscore_drop`, `let_underscore_lock`, and `let_underscore_must_use` from Clippy](https://github.com/rust-lang/rust/pull/97739/)
- [Stabilize `break`ing from arbitrary labeled blocks ("label-break-value")](https://github.com/rust-lang/rust/pull/99332/)
- [Uninitialized integers, floats, and raw pointers are now considered immediate UB](https://github.com/rust-lang/rust/pull/98919/).
  Usage of `MaybeUninit` is the correct way to work with uninitialized memory.
- [Stabilize raw-dylib for Windows x86_64, aarch64, and thumbv7a](https://github.com/rust-lang/rust/pull/99916/)
- [Do not allow `Drop` impl on foreign ADTs](https://github.com/rust-lang/rust/pull/99576/)
  Compiler
--------
- [Stabilize -Csplit-debuginfo on Linux](https://github.com/rust-lang/rust/pull/98051/)
- [Use niche-filling optimization even when multiple variants have data](https://github.com/rust-lang/rust/pull/94075/)
- [Associated type projections are now verified to be well-formed prior to resolving the underlying type](https://github.com/rust-lang/rust/pull/99217/#issuecomment-1209365630)
- [Stringify non-shorthand visibility correctly](https://github.com/rust-lang/rust/pull/100350/)
- [Normalize struct field types when unsizing](https://github.com/rust-lang/rust/pull/101831/)
- [Update to LLVM 15](https://github.com/rust-lang/rust/pull/99464/)
- [Fix aarch64 call abi to correctly zeroext when needed](https://github.com/rust-lang/rust/pull/97800/)
- [debuginfo: Generalize C++-like encoding for enums](https://github.com/rust-lang/rust/pull/98393/)
- [Add `special_module_name` lint](https://github.com/rust-lang/rust/pull/94467/)
- [Add support for generating unique profraw files by default when using `-C instrument-coverage`](https://github.com/rust-lang/rust/pull/100384/)
- [Allow dynamic linking for iOS/tvOS targets](https://github.com/rust-lang/rust/pull/100636/)
  New targets:
- [Add armv4t-none-eabi as a tier 3 target](https://github.com/rust-lang/rust/pull/100244/)
- [Add powerpc64-unknown-openbsd and riscv64-unknown-openbsd as tier 3 targets](https://github.com/rust-lang/rust/pull/101025/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  Libraries
---------
- [Don't generate `PartialEq::ne` in derive(PartialEq)](https://github.com/rust-lang/rust/pull/98655/)
- [Windows RNG: Use `BCRYPT_RNG_ALG_HANDLE` by default](https://github.com/rust-lang/rust/pull/101325/)
- [Forbid mixing `System` with direct system allocator calls](https://github.com/rust-lang/rust/pull/101394/)
- [Document no support for writing to non-blocking stdio/stderr](https://github.com/rust-lang/rust/pull/101416/)
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295)
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
  Stabilized APIs
- [`std::backtrace::Backtrace`](https://doc.rust-lang.org/stable/std/backtrace/struct.Backtrace.html)
- [`Bound::as_ref`](https://doc.rust-lang.org/stable/std/ops/enum.Bound.html#method.as_ref)
- [`std::io::read_to_string`](https://doc.rust-lang.org/stable/std/io/fn.read_to_string.html)
- [`&lt;*const T&gt;::cast_mut`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_mut)
- [`&lt;*mut T&gt;::cast_const`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_const)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
- [`&lt;*mut T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
  Cargo
-----
- [Apply GitHub fast path even for partial hashes](https://github.com/rust-lang/cargo/pull/10807/)
- [Do not add home bin path to PATH if it's already there](https://github.com/rust-lang/cargo/pull/11023/)
- [Take priority into account within the pending queue](https://github.com/rust-lang/cargo/pull/11032/).
  This slightly optimizes job scheduling by Cargo, with typically small improvements on larger crate graph builds.
  Compatibility Notes
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295).
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
- [`PollFn` now only implements `Unpin` if the closure is `Unpin`](https://github.com/rust-lang/rust/pull/102737).
  This is a possible breaking change if users were relying on the blanket unpin implementation.
  See discussion on the PR for details of why this change was made.
- [Drop ExactSizeIterator impl from std::char::EscapeAscii](https://github.com/rust-lang/rust/pull/99880)
  This is a backwards-incompatible change to the standard library's surface
  area, but is unlikely to affect real world usage.
- [Do not consider a single repeated lifetime eligible for elision in the return type](https://github.com/rust-lang/rust/pull/103450)
  This behavior was unintentionally changed in 1.64.0, and this release reverts that change by making this an error again.
- [Reenable disabled early syntax gates as future-incompatibility lints](https://github.com/rust-lang/rust/pull/99935/)
- [Update the minimum external LLVM to 13](https://github.com/rust-lang/rust/pull/100460/)
- [Don't duplicate file descriptors into stdio fds](https://github.com/rust-lang/rust/pull/101426/)
- [Sunset RLS](https://github.com/rust-lang/rust/pull/100863/)
- [Deny usage of `#![cfg_attr(..., crate_type = ...)]` to set the crate type](https://github.com/rust-lang/rust/pull/99784/)
  This strengthens the forward compatibility lint deprecated_cfg_attr_crate_type_name to deny.
- [`llvm-has-rust-patches` allows setting the build system to treat the LLVM as having Rust-specific patches](https://github.com/rust-lang/rust/pull/101072)
  This option may need to be set for distributions that are building Rust with a patched LLVM via `llvm-config`, not the built-in LLVM.</changelog>
  <changelog author="william.brown@suse.com" date="1667822400">- Fix CI test fix that OBS removed</changelog>
  <changelog author="william.brown@suse.com" date="1667908800">- Fix incorrect SLE/Leap version check for gcc</changelog>
  <changelog author="aplanas@suse.com" date="1667995200">- Drop .cargo/config creation as a workaround for vendored components
  https://github.com/rust-lang/rust/issues/90764</changelog>
  <changelog author="aplanas@suse.com" date="1669982400">- Add NoSource for the bootstrap compilers.  This generate a nosrc.rpm
  that contains only the src.tar.xz
  + According to the documentation NoSource can be a list of
    space-separated numbers, but the source code of the RPM
    parseUnsignedNum (buid/misc.c) should that this is not the case.</changelog>
  <changelog author="william.brown@suse.com" date="1673352000">- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
  * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch
  * 0002-Rebuild-Cargo.lock.patch</changelog>
</package>
<package pkgid="effae7df96da1606dc57dbbf2b1ff673bf011fac15774f256fd96a2481b20c7f" name="cargo1.65" arch="x86_64">
  <version epoch="0" ver="1.65.0" rel="150300.7.9.1"/>
  <changelog author="william.brown@suse.com" date="1667476800">Version 1.65.0 (2022-11-03)
  Language
--------
- [Error on `as` casts of enums with `#[non_exhaustive]` variants](https://github.com/rust-lang/rust/pull/92744/)
- [Stabilize `let else`](https://github.com/rust-lang/rust/pull/93628/)
- [Stabilize generic associated types (GATs)](https://github.com/rust-lang/rust/pull/96709/)
- [Add lints `let_underscore_drop`, `let_underscore_lock`, and `let_underscore_must_use` from Clippy](https://github.com/rust-lang/rust/pull/97739/)
- [Stabilize `break`ing from arbitrary labeled blocks ("label-break-value")](https://github.com/rust-lang/rust/pull/99332/)
- [Uninitialized integers, floats, and raw pointers are now considered immediate UB](https://github.com/rust-lang/rust/pull/98919/).
  Usage of `MaybeUninit` is the correct way to work with uninitialized memory.
- [Stabilize raw-dylib for Windows x86_64, aarch64, and thumbv7a](https://github.com/rust-lang/rust/pull/99916/)
- [Do not allow `Drop` impl on foreign ADTs](https://github.com/rust-lang/rust/pull/99576/)
  Compiler
--------
- [Stabilize -Csplit-debuginfo on Linux](https://github.com/rust-lang/rust/pull/98051/)
- [Use niche-filling optimization even when multiple variants have data](https://github.com/rust-lang/rust/pull/94075/)
- [Associated type projections are now verified to be well-formed prior to resolving the underlying type](https://github.com/rust-lang/rust/pull/99217/#issuecomment-1209365630)
- [Stringify non-shorthand visibility correctly](https://github.com/rust-lang/rust/pull/100350/)
- [Normalize struct field types when unsizing](https://github.com/rust-lang/rust/pull/101831/)
- [Update to LLVM 15](https://github.com/rust-lang/rust/pull/99464/)
- [Fix aarch64 call abi to correctly zeroext when needed](https://github.com/rust-lang/rust/pull/97800/)
- [debuginfo: Generalize C++-like encoding for enums](https://github.com/rust-lang/rust/pull/98393/)
- [Add `special_module_name` lint](https://github.com/rust-lang/rust/pull/94467/)
- [Add support for generating unique profraw files by default when using `-C instrument-coverage`](https://github.com/rust-lang/rust/pull/100384/)
- [Allow dynamic linking for iOS/tvOS targets](https://github.com/rust-lang/rust/pull/100636/)
  New targets:
- [Add armv4t-none-eabi as a tier 3 target](https://github.com/rust-lang/rust/pull/100244/)
- [Add powerpc64-unknown-openbsd and riscv64-unknown-openbsd as tier 3 targets](https://github.com/rust-lang/rust/pull/101025/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  Libraries
---------
- [Don't generate `PartialEq::ne` in derive(PartialEq)](https://github.com/rust-lang/rust/pull/98655/)
- [Windows RNG: Use `BCRYPT_RNG_ALG_HANDLE` by default](https://github.com/rust-lang/rust/pull/101325/)
- [Forbid mixing `System` with direct system allocator calls](https://github.com/rust-lang/rust/pull/101394/)
- [Document no support for writing to non-blocking stdio/stderr](https://github.com/rust-lang/rust/pull/101416/)
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295)
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
  Stabilized APIs
- [`std::backtrace::Backtrace`](https://doc.rust-lang.org/stable/std/backtrace/struct.Backtrace.html)
- [`Bound::as_ref`](https://doc.rust-lang.org/stable/std/ops/enum.Bound.html#method.as_ref)
- [`std::io::read_to_string`](https://doc.rust-lang.org/stable/std/io/fn.read_to_string.html)
- [`&lt;*const T&gt;::cast_mut`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_mut)
- [`&lt;*mut T&gt;::cast_const`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.cast_const)
  These APIs are now stable in const contexts:
- [`&lt;*const T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
- [`&lt;*mut T&gt;::offset_from`](https://doc.rust-lang.org/stable/std/primitive.pointer.html#method.offset_from)
  Cargo
-----
- [Apply GitHub fast path even for partial hashes](https://github.com/rust-lang/cargo/pull/10807/)
- [Do not add home bin path to PATH if it's already there](https://github.com/rust-lang/cargo/pull/11023/)
- [Take priority into account within the pending queue](https://github.com/rust-lang/cargo/pull/11032/).
  This slightly optimizes job scheduling by Cargo, with typically small improvements on larger crate graph builds.
  Compatibility Notes
- [`std::layout::Layout` size must not overflow `isize::MAX` when rounded up to `align`](https://github.com/rust-lang/rust/pull/95295).
  This also changes the safety conditions on `Layout::from_size_align_unchecked`.
- [`PollFn` now only implements `Unpin` if the closure is `Unpin`](https://github.com/rust-lang/rust/pull/102737).
  This is a possible breaking change if users were relying on the blanket unpin implementation.
  See discussion on the PR for details of why this change was made.
- [Drop ExactSizeIterator impl from std::char::EscapeAscii](https://github.com/rust-lang/rust/pull/99880)
  This is a backwards-incompatible change to the standard library's surface
  area, but is unlikely to affect real world usage.
- [Do not consider a single repeated lifetime eligible for elision in the return type](https://github.com/rust-lang/rust/pull/103450)
  This behavior was unintentionally changed in 1.64.0, and this release reverts that change by making this an error again.
- [Reenable disabled early syntax gates as future-incompatibility lints](https://github.com/rust-lang/rust/pull/99935/)
- [Update the minimum external LLVM to 13](https://github.com/rust-lang/rust/pull/100460/)
- [Don't duplicate file descriptors into stdio fds](https://github.com/rust-lang/rust/pull/101426/)
- [Sunset RLS](https://github.com/rust-lang/rust/pull/100863/)
- [Deny usage of `#![cfg_attr(..., crate_type = ...)]` to set the crate type](https://github.com/rust-lang/rust/pull/99784/)
  This strengthens the forward compatibility lint deprecated_cfg_attr_crate_type_name to deny.
- [`llvm-has-rust-patches` allows setting the build system to treat the LLVM as having Rust-specific patches](https://github.com/rust-lang/rust/pull/101072)
  This option may need to be set for distributions that are building Rust with a patched LLVM via `llvm-config`, not the built-in LLVM.</changelog>
  <changelog author="william.brown@suse.com" date="1667822400">- Fix CI test fix that OBS removed</changelog>
  <changelog author="william.brown@suse.com" date="1667908800">- Fix incorrect SLE/Leap version check for gcc</changelog>
  <changelog author="aplanas@suse.com" date="1667995200">- Drop .cargo/config creation as a workaround for vendored components
  https://github.com/rust-lang/rust/issues/90764</changelog>
  <changelog author="aplanas@suse.com" date="1669982400">- Add NoSource for the bootstrap compilers.  This generate a nosrc.rpm
  that contains only the src.tar.xz
  + According to the documentation NoSource can be a list of
    space-separated numbers, but the source code of the RPM
    parseUnsignedNum (buid/misc.c) should that this is not the case.</changelog>
  <changelog author="william.brown@suse.com" date="1673352000">- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
  * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch
  * 0002-Rebuild-Cargo.lock.patch</changelog>
</package>
<package pkgid="6f008e02c72c2d452fdc45c5831fec637a20516019c7011cfe055892f6bb3346" name="cargo1.66" arch="aarch64">
  <version epoch="0" ver="1.66.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1671192000">Version 1.66.0 (2022-12-15)
  Language
--------
- [Permit specifying explicit discriminants on all `repr(Int)` enums](https://github.com/rust-lang/rust/pull/95710/)
  ```rust
  [#][repr(u8)]
  enum Foo {
    A(u8) = 0,
    B(i8) = 1,
    C(bool) = 42,
  }
  ```
- [Allow transmutes between the same type differing only in lifetimes](https://github.com/rust-lang/rust/pull/101520/)
- [Change constant evaluation errors from a deny-by-default lint to a hard error](https://github.com/rust-lang/rust/pull/102091/)
- [Trigger `must_use` on `impl Trait` for supertraits](https://github.com/rust-lang/rust/pull/102287/)
  This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`.
- [Allow `..X` and `..=X` in patterns](https://github.com/rust-lang/rust/pull/102275/)
- [Uplift `clippy::for_loops_over_fallibles` lint into rustc](https://github.com/rust-lang/rust/pull/99696/)
- [Stabilize `sym` operands in inline assembly](https://github.com/rust-lang/rust/pull/103168/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101912/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
  Compiler
--------
- [Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets](https://github.com/rust-lang/rust/pull/101329/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Add support for linking against macOS universal libraries](https://github.com/rust-lang/rust/pull/98736)
  Libraries
---------
- [Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds](https://github.com/rust-lang/rust/pull/101040/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101821/)
  Stabilized APIs
- [`proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.source_text)
- [`uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.html#method.checked_add_signed)
- [`iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_add_unsigned)
- [`iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_sub_unsigned)
- [`BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSet.html#method.first)
- [`BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMap.html#method.first_key_value)
- [Add `AsFd` implementations for stdio lock types on WASI.](https://github.com/rust-lang/rust/pull/101768/)
- [`impl TryFrom&lt;Vec&lt;T&gt;&gt; for Box&lt;[T; N]&gt;`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFrom%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E)
- [`core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/time/struct.Duration.html#method.try_from_secs_f32)
- [`Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.unzip)
- [`std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html)
  Rustdoc
-------
- [Add Rustdoc warning for invalid HTML tags in the documentation](https://github.com/rust-lang/rust/pull/101720/)
  Cargo
-----
- [Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.html)
- [`cargo publish` now waits for the new version to be downloadable before exiting](https://github.com/rust-lang/cargo/pull/11062)
  See [detailed release notes](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#cargo-166-2022-12-15) for more.
  Compatibility Notes
- [Only apply `ProceduralMasquerade` hack to older versions of `rental`](https://github.com/rust-lang/rust/pull/94063/)
- [Don't export `__heap_base` and `__data_end` on wasm32-wasi.](https://github.com/rust-lang/rust/pull/102385/)
- [Don't export `__wasm_init_memory` on WebAssembly.](https://github.com/rust-lang/rust/pull/102426/)
- [Only export `__tls_*` on wasm32-unknown-unknown.](https://github.com/rust-lang/rust/pull/102440/)
- [Don't link to `libresolv` in libstd on Darwin](https://github.com/rust-lang/rust/pull/102766/)
- [Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)](https://github.com/rust-lang/rust/pull/103277/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
- [Make `order_dependent_trait_objects` show up in future-breakage reports](https://github.com/rust-lang/rust/pull/102635/)
- [Change std::process::Command spawning to default to inheriting the parent's signal mask](https://github.com/rust-lang/rust/pull/101077/)</changelog>
</package>
<package pkgid="6eae46c19ed6c83919d62b2b6bbd71c6f544fa16a2e9ae4f702e673e721a5774" name="cargo1.66" arch="ppc64le">
  <version epoch="0" ver="1.66.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1671192000">Version 1.66.0 (2022-12-15)
  Language
--------
- [Permit specifying explicit discriminants on all `repr(Int)` enums](https://github.com/rust-lang/rust/pull/95710/)
  ```rust
  [#][repr(u8)]
  enum Foo {
    A(u8) = 0,
    B(i8) = 1,
    C(bool) = 42,
  }
  ```
- [Allow transmutes between the same type differing only in lifetimes](https://github.com/rust-lang/rust/pull/101520/)
- [Change constant evaluation errors from a deny-by-default lint to a hard error](https://github.com/rust-lang/rust/pull/102091/)
- [Trigger `must_use` on `impl Trait` for supertraits](https://github.com/rust-lang/rust/pull/102287/)
  This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`.
- [Allow `..X` and `..=X` in patterns](https://github.com/rust-lang/rust/pull/102275/)
- [Uplift `clippy::for_loops_over_fallibles` lint into rustc](https://github.com/rust-lang/rust/pull/99696/)
- [Stabilize `sym` operands in inline assembly](https://github.com/rust-lang/rust/pull/103168/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101912/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
  Compiler
--------
- [Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets](https://github.com/rust-lang/rust/pull/101329/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Add support for linking against macOS universal libraries](https://github.com/rust-lang/rust/pull/98736)
  Libraries
---------
- [Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds](https://github.com/rust-lang/rust/pull/101040/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101821/)
  Stabilized APIs
- [`proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.source_text)
- [`uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.html#method.checked_add_signed)
- [`iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_add_unsigned)
- [`iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_sub_unsigned)
- [`BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSet.html#method.first)
- [`BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMap.html#method.first_key_value)
- [Add `AsFd` implementations for stdio lock types on WASI.](https://github.com/rust-lang/rust/pull/101768/)
- [`impl TryFrom&lt;Vec&lt;T&gt;&gt; for Box&lt;[T; N]&gt;`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFrom%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E)
- [`core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/time/struct.Duration.html#method.try_from_secs_f32)
- [`Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.unzip)
- [`std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html)
  Rustdoc
-------
- [Add Rustdoc warning for invalid HTML tags in the documentation](https://github.com/rust-lang/rust/pull/101720/)
  Cargo
-----
- [Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.html)
- [`cargo publish` now waits for the new version to be downloadable before exiting](https://github.com/rust-lang/cargo/pull/11062)
  See [detailed release notes](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#cargo-166-2022-12-15) for more.
  Compatibility Notes
- [Only apply `ProceduralMasquerade` hack to older versions of `rental`](https://github.com/rust-lang/rust/pull/94063/)
- [Don't export `__heap_base` and `__data_end` on wasm32-wasi.](https://github.com/rust-lang/rust/pull/102385/)
- [Don't export `__wasm_init_memory` on WebAssembly.](https://github.com/rust-lang/rust/pull/102426/)
- [Only export `__tls_*` on wasm32-unknown-unknown.](https://github.com/rust-lang/rust/pull/102440/)
- [Don't link to `libresolv` in libstd on Darwin](https://github.com/rust-lang/rust/pull/102766/)
- [Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)](https://github.com/rust-lang/rust/pull/103277/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
- [Make `order_dependent_trait_objects` show up in future-breakage reports](https://github.com/rust-lang/rust/pull/102635/)
- [Change std::process::Command spawning to default to inheriting the parent's signal mask](https://github.com/rust-lang/rust/pull/101077/)</changelog>
</package>
<package pkgid="8364c1db049708b7104ea02d8e38be4b62e8d229907892b05e70f77c0ae7e597" name="cargo1.66" arch="s390x">
  <version epoch="0" ver="1.66.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1671192000">Version 1.66.0 (2022-12-15)
  Language
--------
- [Permit specifying explicit discriminants on all `repr(Int)` enums](https://github.com/rust-lang/rust/pull/95710/)
  ```rust
  [#][repr(u8)]
  enum Foo {
    A(u8) = 0,
    B(i8) = 1,
    C(bool) = 42,
  }
  ```
- [Allow transmutes between the same type differing only in lifetimes](https://github.com/rust-lang/rust/pull/101520/)
- [Change constant evaluation errors from a deny-by-default lint to a hard error](https://github.com/rust-lang/rust/pull/102091/)
- [Trigger `must_use` on `impl Trait` for supertraits](https://github.com/rust-lang/rust/pull/102287/)
  This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`.
- [Allow `..X` and `..=X` in patterns](https://github.com/rust-lang/rust/pull/102275/)
- [Uplift `clippy::for_loops_over_fallibles` lint into rustc](https://github.com/rust-lang/rust/pull/99696/)
- [Stabilize `sym` operands in inline assembly](https://github.com/rust-lang/rust/pull/103168/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101912/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
  Compiler
--------
- [Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets](https://github.com/rust-lang/rust/pull/101329/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Add support for linking against macOS universal libraries](https://github.com/rust-lang/rust/pull/98736)
  Libraries
---------
- [Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds](https://github.com/rust-lang/rust/pull/101040/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101821/)
  Stabilized APIs
- [`proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.source_text)
- [`uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.html#method.checked_add_signed)
- [`iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_add_unsigned)
- [`iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_sub_unsigned)
- [`BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSet.html#method.first)
- [`BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMap.html#method.first_key_value)
- [Add `AsFd` implementations for stdio lock types on WASI.](https://github.com/rust-lang/rust/pull/101768/)
- [`impl TryFrom&lt;Vec&lt;T&gt;&gt; for Box&lt;[T; N]&gt;`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFrom%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E)
- [`core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/time/struct.Duration.html#method.try_from_secs_f32)
- [`Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.unzip)
- [`std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html)
  Rustdoc
-------
- [Add Rustdoc warning for invalid HTML tags in the documentation](https://github.com/rust-lang/rust/pull/101720/)
  Cargo
-----
- [Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.html)
- [`cargo publish` now waits for the new version to be downloadable before exiting](https://github.com/rust-lang/cargo/pull/11062)
  See [detailed release notes](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#cargo-166-2022-12-15) for more.
  Compatibility Notes
- [Only apply `ProceduralMasquerade` hack to older versions of `rental`](https://github.com/rust-lang/rust/pull/94063/)
- [Don't export `__heap_base` and `__data_end` on wasm32-wasi.](https://github.com/rust-lang/rust/pull/102385/)
- [Don't export `__wasm_init_memory` on WebAssembly.](https://github.com/rust-lang/rust/pull/102426/)
- [Only export `__tls_*` on wasm32-unknown-unknown.](https://github.com/rust-lang/rust/pull/102440/)
- [Don't link to `libresolv` in libstd on Darwin](https://github.com/rust-lang/rust/pull/102766/)
- [Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)](https://github.com/rust-lang/rust/pull/103277/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
- [Make `order_dependent_trait_objects` show up in future-breakage reports](https://github.com/rust-lang/rust/pull/102635/)
- [Change std::process::Command spawning to default to inheriting the parent's signal mask](https://github.com/rust-lang/rust/pull/101077/)</changelog>
</package>
<package pkgid="fe74cf4a7903e6c8d02228b78521b8efa54f0c42b7da2c48adcb14dedee720b4" name="cargo1.66" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1671192000">Version 1.66.0 (2022-12-15)
  Language
--------
- [Permit specifying explicit discriminants on all `repr(Int)` enums](https://github.com/rust-lang/rust/pull/95710/)
  ```rust
  [#][repr(u8)]
  enum Foo {
    A(u8) = 0,
    B(i8) = 1,
    C(bool) = 42,
  }
  ```
- [Allow transmutes between the same type differing only in lifetimes](https://github.com/rust-lang/rust/pull/101520/)
- [Change constant evaluation errors from a deny-by-default lint to a hard error](https://github.com/rust-lang/rust/pull/102091/)
- [Trigger `must_use` on `impl Trait` for supertraits](https://github.com/rust-lang/rust/pull/102287/)
  This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`.
- [Allow `..X` and `..=X` in patterns](https://github.com/rust-lang/rust/pull/102275/)
- [Uplift `clippy::for_loops_over_fallibles` lint into rustc](https://github.com/rust-lang/rust/pull/99696/)
- [Stabilize `sym` operands in inline assembly](https://github.com/rust-lang/rust/pull/103168/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101912/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
  Compiler
--------
- [Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets](https://github.com/rust-lang/rust/pull/101329/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Add support for linking against macOS universal libraries](https://github.com/rust-lang/rust/pull/98736)
  Libraries
---------
- [Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds](https://github.com/rust-lang/rust/pull/101040/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101821/)
  Stabilized APIs
- [`proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.source_text)
- [`uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.html#method.checked_add_signed)
- [`iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_add_unsigned)
- [`iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_sub_unsigned)
- [`BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSet.html#method.first)
- [`BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMap.html#method.first_key_value)
- [Add `AsFd` implementations for stdio lock types on WASI.](https://github.com/rust-lang/rust/pull/101768/)
- [`impl TryFrom&lt;Vec&lt;T&gt;&gt; for Box&lt;[T; N]&gt;`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFrom%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E)
- [`core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/time/struct.Duration.html#method.try_from_secs_f32)
- [`Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.unzip)
- [`std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html)
  Rustdoc
-------
- [Add Rustdoc warning for invalid HTML tags in the documentation](https://github.com/rust-lang/rust/pull/101720/)
  Cargo
-----
- [Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.html)
- [`cargo publish` now waits for the new version to be downloadable before exiting](https://github.com/rust-lang/cargo/pull/11062)
  See [detailed release notes](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#cargo-166-2022-12-15) for more.
  Compatibility Notes
- [Only apply `ProceduralMasquerade` hack to older versions of `rental`](https://github.com/rust-lang/rust/pull/94063/)
- [Don't export `__heap_base` and `__data_end` on wasm32-wasi.](https://github.com/rust-lang/rust/pull/102385/)
- [Don't export `__wasm_init_memory` on WebAssembly.](https://github.com/rust-lang/rust/pull/102426/)
- [Only export `__tls_*` on wasm32-unknown-unknown.](https://github.com/rust-lang/rust/pull/102440/)
- [Don't link to `libresolv` in libstd on Darwin](https://github.com/rust-lang/rust/pull/102766/)
- [Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)](https://github.com/rust-lang/rust/pull/103277/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
- [Make `order_dependent_trait_objects` show up in future-breakage reports](https://github.com/rust-lang/rust/pull/102635/)
- [Change std::process::Command spawning to default to inheriting the parent's signal mask](https://github.com/rust-lang/rust/pull/101077/)</changelog>
</package>
<package pkgid="1c5f3db6100eb2d6f7620f41300453fa720e8aeb086cd232f5812f776e906961" name="cargo1.66" arch="aarch64">
  <version epoch="0" ver="1.66.0" rel="150400.9.9.1"/>
  <changelog author="william.brown@suse.com" date="1671192000">Version 1.66.0 (2022-12-15)
  Language
--------
- [Permit specifying explicit discriminants on all `repr(Int)` enums](https://github.com/rust-lang/rust/pull/95710/)
  ```rust
  [#][repr(u8)]
  enum Foo {
    A(u8) = 0,
    B(i8) = 1,
    C(bool) = 42,
  }
  ```
- [Allow transmutes between the same type differing only in lifetimes](https://github.com/rust-lang/rust/pull/101520/)
- [Change constant evaluation errors from a deny-by-default lint to a hard error](https://github.com/rust-lang/rust/pull/102091/)
- [Trigger `must_use` on `impl Trait` for supertraits](https://github.com/rust-lang/rust/pull/102287/)
  This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`.
- [Allow `..X` and `..=X` in patterns](https://github.com/rust-lang/rust/pull/102275/)
- [Uplift `clippy::for_loops_over_fallibles` lint into rustc](https://github.com/rust-lang/rust/pull/99696/)
- [Stabilize `sym` operands in inline assembly](https://github.com/rust-lang/rust/pull/103168/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101912/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
  Compiler
--------
- [Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets](https://github.com/rust-lang/rust/pull/101329/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Add support for linking against macOS universal libraries](https://github.com/rust-lang/rust/pull/98736)
  Libraries
---------
- [Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds](https://github.com/rust-lang/rust/pull/101040/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101821/)
  Stabilized APIs
- [`proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.source_text)
- [`uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.html#method.checked_add_signed)
- [`iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_add_unsigned)
- [`iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_sub_unsigned)
- [`BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSet.html#method.first)
- [`BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMap.html#method.first_key_value)
- [Add `AsFd` implementations for stdio lock types on WASI.](https://github.com/rust-lang/rust/pull/101768/)
- [`impl TryFrom&lt;Vec&lt;T&gt;&gt; for Box&lt;[T; N]&gt;`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFrom%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E)
- [`core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/time/struct.Duration.html#method.try_from_secs_f32)
- [`Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.unzip)
- [`std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html)
  Rustdoc
-------
- [Add Rustdoc warning for invalid HTML tags in the documentation](https://github.com/rust-lang/rust/pull/101720/)
  Cargo
-----
- [Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.html)
- [`cargo publish` now waits for the new version to be downloadable before exiting](https://github.com/rust-lang/cargo/pull/11062)
  See [detailed release notes](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#cargo-166-2022-12-15) for more.
  Compatibility Notes
- [Only apply `ProceduralMasquerade` hack to older versions of `rental`](https://github.com/rust-lang/rust/pull/94063/)
- [Don't export `__heap_base` and `__data_end` on wasm32-wasi.](https://github.com/rust-lang/rust/pull/102385/)
- [Don't export `__wasm_init_memory` on WebAssembly.](https://github.com/rust-lang/rust/pull/102426/)
- [Only export `__tls_*` on wasm32-unknown-unknown.](https://github.com/rust-lang/rust/pull/102440/)
- [Don't link to `libresolv` in libstd on Darwin](https://github.com/rust-lang/rust/pull/102766/)
- [Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)](https://github.com/rust-lang/rust/pull/103277/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
- [Make `order_dependent_trait_objects` show up in future-breakage reports](https://github.com/rust-lang/rust/pull/102635/)
- [Change std::process::Command spawning to default to inheriting the parent's signal mask](https://github.com/rust-lang/rust/pull/101077/)</changelog>
  <changelog author="william.brown@suse.com" date="1673352000">- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
  * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch</changelog>
</package>
<package pkgid="44ebf9ccd1909506c2e9f3d40aeb51a80d79e5204b05830f6bbed507a45338d1" name="cargo1.66" arch="ppc64le">
  <version epoch="0" ver="1.66.0" rel="150400.9.9.1"/>
  <changelog author="william.brown@suse.com" date="1671192000">Version 1.66.0 (2022-12-15)
  Language
--------
- [Permit specifying explicit discriminants on all `repr(Int)` enums](https://github.com/rust-lang/rust/pull/95710/)
  ```rust
  [#][repr(u8)]
  enum Foo {
    A(u8) = 0,
    B(i8) = 1,
    C(bool) = 42,
  }
  ```
- [Allow transmutes between the same type differing only in lifetimes](https://github.com/rust-lang/rust/pull/101520/)
- [Change constant evaluation errors from a deny-by-default lint to a hard error](https://github.com/rust-lang/rust/pull/102091/)
- [Trigger `must_use` on `impl Trait` for supertraits](https://github.com/rust-lang/rust/pull/102287/)
  This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`.
- [Allow `..X` and `..=X` in patterns](https://github.com/rust-lang/rust/pull/102275/)
- [Uplift `clippy::for_loops_over_fallibles` lint into rustc](https://github.com/rust-lang/rust/pull/99696/)
- [Stabilize `sym` operands in inline assembly](https://github.com/rust-lang/rust/pull/103168/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101912/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
  Compiler
--------
- [Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets](https://github.com/rust-lang/rust/pull/101329/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Add support for linking against macOS universal libraries](https://github.com/rust-lang/rust/pull/98736)
  Libraries
---------
- [Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds](https://github.com/rust-lang/rust/pull/101040/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101821/)
  Stabilized APIs
- [`proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.source_text)
- [`uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.html#method.checked_add_signed)
- [`iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_add_unsigned)
- [`iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_sub_unsigned)
- [`BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSet.html#method.first)
- [`BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMap.html#method.first_key_value)
- [Add `AsFd` implementations for stdio lock types on WASI.](https://github.com/rust-lang/rust/pull/101768/)
- [`impl TryFrom&lt;Vec&lt;T&gt;&gt; for Box&lt;[T; N]&gt;`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFrom%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E)
- [`core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/time/struct.Duration.html#method.try_from_secs_f32)
- [`Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.unzip)
- [`std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html)
  Rustdoc
-------
- [Add Rustdoc warning for invalid HTML tags in the documentation](https://github.com/rust-lang/rust/pull/101720/)
  Cargo
-----
- [Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.html)
- [`cargo publish` now waits for the new version to be downloadable before exiting](https://github.com/rust-lang/cargo/pull/11062)
  See [detailed release notes](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#cargo-166-2022-12-15) for more.
  Compatibility Notes
- [Only apply `ProceduralMasquerade` hack to older versions of `rental`](https://github.com/rust-lang/rust/pull/94063/)
- [Don't export `__heap_base` and `__data_end` on wasm32-wasi.](https://github.com/rust-lang/rust/pull/102385/)
- [Don't export `__wasm_init_memory` on WebAssembly.](https://github.com/rust-lang/rust/pull/102426/)
- [Only export `__tls_*` on wasm32-unknown-unknown.](https://github.com/rust-lang/rust/pull/102440/)
- [Don't link to `libresolv` in libstd on Darwin](https://github.com/rust-lang/rust/pull/102766/)
- [Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)](https://github.com/rust-lang/rust/pull/103277/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
- [Make `order_dependent_trait_objects` show up in future-breakage reports](https://github.com/rust-lang/rust/pull/102635/)
- [Change std::process::Command spawning to default to inheriting the parent's signal mask](https://github.com/rust-lang/rust/pull/101077/)</changelog>
  <changelog author="william.brown@suse.com" date="1673352000">- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
  * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch</changelog>
</package>
<package pkgid="1ae3d0d175dbd1a8095e709af8f1aaca0f8c265ac0bde939c46cc73d02c15dd9" name="cargo1.66" arch="s390x">
  <version epoch="0" ver="1.66.0" rel="150400.9.9.1"/>
  <changelog author="william.brown@suse.com" date="1671192000">Version 1.66.0 (2022-12-15)
  Language
--------
- [Permit specifying explicit discriminants on all `repr(Int)` enums](https://github.com/rust-lang/rust/pull/95710/)
  ```rust
  [#][repr(u8)]
  enum Foo {
    A(u8) = 0,
    B(i8) = 1,
    C(bool) = 42,
  }
  ```
- [Allow transmutes between the same type differing only in lifetimes](https://github.com/rust-lang/rust/pull/101520/)
- [Change constant evaluation errors from a deny-by-default lint to a hard error](https://github.com/rust-lang/rust/pull/102091/)
- [Trigger `must_use` on `impl Trait` for supertraits](https://github.com/rust-lang/rust/pull/102287/)
  This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`.
- [Allow `..X` and `..=X` in patterns](https://github.com/rust-lang/rust/pull/102275/)
- [Uplift `clippy::for_loops_over_fallibles` lint into rustc](https://github.com/rust-lang/rust/pull/99696/)
- [Stabilize `sym` operands in inline assembly](https://github.com/rust-lang/rust/pull/103168/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101912/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
  Compiler
--------
- [Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets](https://github.com/rust-lang/rust/pull/101329/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Add support for linking against macOS universal libraries](https://github.com/rust-lang/rust/pull/98736)
  Libraries
---------
- [Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds](https://github.com/rust-lang/rust/pull/101040/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101821/)
  Stabilized APIs
- [`proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.source_text)
- [`uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.html#method.checked_add_signed)
- [`iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_add_unsigned)
- [`iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_sub_unsigned)
- [`BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSet.html#method.first)
- [`BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMap.html#method.first_key_value)
- [Add `AsFd` implementations for stdio lock types on WASI.](https://github.com/rust-lang/rust/pull/101768/)
- [`impl TryFrom&lt;Vec&lt;T&gt;&gt; for Box&lt;[T; N]&gt;`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFrom%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E)
- [`core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/time/struct.Duration.html#method.try_from_secs_f32)
- [`Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.unzip)
- [`std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html)
  Rustdoc
-------
- [Add Rustdoc warning for invalid HTML tags in the documentation](https://github.com/rust-lang/rust/pull/101720/)
  Cargo
-----
- [Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.html)
- [`cargo publish` now waits for the new version to be downloadable before exiting](https://github.com/rust-lang/cargo/pull/11062)
  See [detailed release notes](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#cargo-166-2022-12-15) for more.
  Compatibility Notes
- [Only apply `ProceduralMasquerade` hack to older versions of `rental`](https://github.com/rust-lang/rust/pull/94063/)
- [Don't export `__heap_base` and `__data_end` on wasm32-wasi.](https://github.com/rust-lang/rust/pull/102385/)
- [Don't export `__wasm_init_memory` on WebAssembly.](https://github.com/rust-lang/rust/pull/102426/)
- [Only export `__tls_*` on wasm32-unknown-unknown.](https://github.com/rust-lang/rust/pull/102440/)
- [Don't link to `libresolv` in libstd on Darwin](https://github.com/rust-lang/rust/pull/102766/)
- [Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)](https://github.com/rust-lang/rust/pull/103277/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
- [Make `order_dependent_trait_objects` show up in future-breakage reports](https://github.com/rust-lang/rust/pull/102635/)
- [Change std::process::Command spawning to default to inheriting the parent's signal mask](https://github.com/rust-lang/rust/pull/101077/)</changelog>
  <changelog author="william.brown@suse.com" date="1673352000">- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
  * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch</changelog>
</package>
<package pkgid="42d16896125ee0fa2b1589b93e1ea1111d41740d379d0a7bc48dd61db29159eb" name="cargo1.66" arch="x86_64">
  <version epoch="0" ver="1.66.0" rel="150400.9.9.1"/>
  <changelog author="william.brown@suse.com" date="1671192000">Version 1.66.0 (2022-12-15)
  Language
--------
- [Permit specifying explicit discriminants on all `repr(Int)` enums](https://github.com/rust-lang/rust/pull/95710/)
  ```rust
  [#][repr(u8)]
  enum Foo {
    A(u8) = 0,
    B(i8) = 1,
    C(bool) = 42,
  }
  ```
- [Allow transmutes between the same type differing only in lifetimes](https://github.com/rust-lang/rust/pull/101520/)
- [Change constant evaluation errors from a deny-by-default lint to a hard error](https://github.com/rust-lang/rust/pull/102091/)
- [Trigger `must_use` on `impl Trait` for supertraits](https://github.com/rust-lang/rust/pull/102287/)
  This makes `impl ExactSizeIterator` respect the existing `#[must_use]` annotation on `Iterator`.
- [Allow `..X` and `..=X` in patterns](https://github.com/rust-lang/rust/pull/102275/)
- [Uplift `clippy::for_loops_over_fallibles` lint into rustc](https://github.com/rust-lang/rust/pull/99696/)
- [Stabilize `sym` operands in inline assembly](https://github.com/rust-lang/rust/pull/103168/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101912/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
  Compiler
--------
- [Add armv5te-none-eabi and thumbv5te-none-eabi tier 3 targets](https://github.com/rust-lang/rust/pull/101329/)
  - Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
- [Add support for linking against macOS universal libraries](https://github.com/rust-lang/rust/pull/98736)
  Libraries
---------
- [Fix `#[derive(Default)]` on a generic `#[default]` enum adding unnecessary `Default` bounds](https://github.com/rust-lang/rust/pull/101040/)
- [Update to Unicode 15](https://github.com/rust-lang/rust/pull/101821/)
  Stabilized APIs
- [`proc_macro::Span::source_text`](https://doc.rust-lang.org/stable/proc_macro/struct.Span.html#method.source_text)
- [`uX::{checked_add_signed, overflowing_add_signed, saturating_add_signed, wrapping_add_signed}`](https://doc.rust-lang.org/stable/std/primitive.u8.html#method.checked_add_signed)
- [`iX::{checked_add_unsigned, overflowing_add_unsigned, saturating_add_unsigned, wrapping_add_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_add_unsigned)
- [`iX::{checked_sub_unsigned, overflowing_sub_unsigned, saturating_sub_unsigned, wrapping_sub_unsigned}`](https://doc.rust-lang.org/stable/std/primitive.i8.html#method.checked_sub_unsigned)
- [`BTreeSet::{first, last, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeSet.html#method.first)
- [`BTreeMap::{first_key_value, last_key_value, first_entry, last_entry, pop_first, pop_last}`](https://doc.rust-lang.org/stable/std/collections/struct.BTreeMap.html#method.first_key_value)
- [Add `AsFd` implementations for stdio lock types on WASI.](https://github.com/rust-lang/rust/pull/101768/)
- [`impl TryFrom&lt;Vec&lt;T&gt;&gt; for Box&lt;[T; N]&gt;`](https://doc.rust-lang.org/stable/std/boxed/struct.Box.html#impl-TryFrom%3CVec%3CT%2C%20Global%3E%3E-for-Box%3C%5BT%3B%20N%5D%2C%20Global%3E)
- [`core::hint::black_box`](https://doc.rust-lang.org/stable/std/hint/fn.black_box.html)
- [`Duration::try_from_secs_{f32,f64}`](https://doc.rust-lang.org/stable/std/time/struct.Duration.html#method.try_from_secs_f32)
- [`Option::unzip`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.unzip)
- [`std::os::fd`](https://doc.rust-lang.org/stable/std/os/fd/index.html)
  Rustdoc
-------
- [Add Rustdoc warning for invalid HTML tags in the documentation](https://github.com/rust-lang/rust/pull/101720/)
  Cargo
-----
- [Added `cargo remove` to remove dependencies from Cargo.toml](https://doc.rust-lang.org/nightly/cargo/commands/cargo-remove.html)
- [`cargo publish` now waits for the new version to be downloadable before exiting](https://github.com/rust-lang/cargo/pull/11062)
  See [detailed release notes](https://github.com/rust-lang/cargo/blob/master/CHANGELOG.md#cargo-166-2022-12-15) for more.
  Compatibility Notes
- [Only apply `ProceduralMasquerade` hack to older versions of `rental`](https://github.com/rust-lang/rust/pull/94063/)
- [Don't export `__heap_base` and `__data_end` on wasm32-wasi.](https://github.com/rust-lang/rust/pull/102385/)
- [Don't export `__wasm_init_memory` on WebAssembly.](https://github.com/rust-lang/rust/pull/102426/)
- [Only export `__tls_*` on wasm32-unknown-unknown.](https://github.com/rust-lang/rust/pull/102440/)
- [Don't link to `libresolv` in libstd on Darwin](https://github.com/rust-lang/rust/pull/102766/)
- [Update libstd's libc to 0.2.135 (to make `libstd` no longer pull in `libiconv.dylib` on Darwin)](https://github.com/rust-lang/rust/pull/103277/)
- [Opaque types no longer imply lifetime bounds](https://github.com/rust-lang/rust/pull/95474/)
  This is a soundness fix which may break code that was erroneously relying on this behavior.
- [Make `order_dependent_trait_objects` show up in future-breakage reports](https://github.com/rust-lang/rust/pull/102635/)
- [Change std::process::Command spawning to default to inheriting the parent's signal mask](https://github.com/rust-lang/rust/pull/101077/)</changelog>
  <changelog author="william.brown@suse.com" date="1673352000">- bsc#1206930 - CVE-2022-46176 - Enforce that cargo checks ssh host keys.
  * 0001-CVE-2022-46176-verify-ssh-host-keys-in-cargo.patch</changelog>
</package>
<package pkgid="c3ef6d93bc4114ed4d90b4daf902908510651d8b13223627aa4f331db8c699fe" name="cargo1.67" arch="aarch64">
  <version epoch="0" ver="1.67.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1675080000">Version 1.67.0 (2023-01-26)
  Language
--------
- [Make `Sized` predicates coinductive, allowing cycles.](https://github.com/rust-lang/rust/pull/100386/)
- [`#[must_use]` annotations on `async fn` also affect the `Future::Output`.](https://github.com/rust-lang/rust/pull/100633/)
- [Elaborate supertrait obligations when deducing closure signatures.](https://github.com/rust-lang/rust/pull/101834/)
- [Invalid literals are no longer an error under `cfg(FALSE)`.](https://github.com/rust-lang/rust/pull/102944/)
- [Unreserve braced enum variants in value namespace.](https://github.com/rust-lang/rust/pull/103578/)
  Compiler
--------
- [Enable varargs support for calling conventions other than `C` or `cdecl`.](https://github.com/rust-lang/rust/pull/97971/)
- [Add new MIR constant propagation based on dataflow analysis.](https://github.com/rust-lang/rust/pull/101168/)
- [Optimize field ordering by grouping m\*2^n-sized fields with equivalently aligned ones.](https://github.com/rust-lang/rust/pull/102750/)
- [Stabilize native library modifier `verbatim`.](https://github.com/rust-lang/rust/pull/104360/)
  Added and removed targets:
- [Add a tier 3 target for PowerPC on AIX](https://github.com/rust-lang/rust/pull/102293/), `powerpc64-ibm-aix`.
- [Add a tier 3 target for the Sony PlayStation 1](https://github.com/rust-lang/rust/pull/102689/), `mipsel-sony-psx`.
- [Add tier 3 `no_std` targets for the QNX Neutrino RTOS](https://github.com/rust-lang/rust/pull/102701/),
  `aarch64-unknown-nto-qnx710` and `x86_64-pc-nto-qnx710`.
- [Remove tier 3 `linuxkernel` targets](https://github.com/rust-lang/rust/pull/104015/) (not used by the actual kernel).
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Merge `crossbeam-channel` into `std::sync::mpsc`.](https://github.com/rust-lang/rust/pull/93563/)
- [Fix inconsistent rounding of 0.5 when formatted to 0 decimal places.](https://github.com/rust-lang/rust/pull/102935/)
- [Derive `Eq` and `Hash` for `ControlFlow`.](https://github.com/rust-lang/rust/pull/103084/)
- [Don't build `compiler_builtins` with `-C panic=abort`.](https://github.com/rust-lang/rust/pull/103786/)
  Stabilized APIs
- [`{integer}::checked_ilog`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog)
- [`{integer}::checked_ilog2`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog2)
- [`{integer}::checked_ilog10`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog10)
- [`{integer}::ilog`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog)
- [`{integer}::ilog2`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog2)
- [`{integer}::ilog10`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog10)
- [`NonZeroU*::ilog2`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#method.ilog2)
- [`NonZeroU*::ilog10`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#method.ilog10)
- [`NonZero*::BITS`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#associatedconstant.BITS)
  These APIs are now stable in const contexts:
- [`char::from_u32`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.from_u32)
- [`char::from_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.from_digit)
- [`char::to_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.to_digit)
- [`core::char::from_u32`](https://doc.rust-lang.org/stable/core/char/fn.from_u32.html)
- [`core::char::from_digit`](https://doc.rust-lang.org/stable/core/char/fn.from_digit.html)
  Compatibility Notes
- [The layout of `repr(Rust)` types now groups m\*2^n-sized fields with
  equivalently aligned ones.](https://github.com/rust-lang/rust/pull/102750/)
  This is intended to be an optimization, but it is also known to increase type
  sizes in a few cases for the placement of enum tags. As a reminder, the layout
  of `repr(Rust)` types is an implementation detail, subject to change.
- [0.5 now rounds to 0 when formatted to 0 decimal places.](https://github.com/rust-lang/rust/pull/102935/)
  This makes it consistent with the rest of floating point formatting that
  rounds ties toward even digits.
- [Chains of `&amp;&amp;` and `||` will now drop temporaries from their sub-expressions in
  evaluation order, left-to-right.](https://github.com/rust-lang/rust/pull/103293/)
  Previously, it was "twisted" such that the _first_ expression dropped its
  temporaries _last_, after all of the other expressions dropped in order.
- [Underscore suffixes on string literals are now a hard error.](https://github.com/rust-lang/rust/pull/103914/)
  This has been a future-compatibility warning since 1.20.0.
- [Stop passing `-export-dynamic` to `wasm-ld`.](https://github.com/rust-lang/rust/pull/105405/)
- [`main` is now mangled as `__main_void` on `wasm32-wasi`.](https://github.com/rust-lang/rust/pull/105468/)
- [Cargo now emits an error if there are multiple registries in the configuration
  with the same index URL.](https://github.com/rust-lang/cargo/pull/10592)</changelog>
</package>
<package pkgid="77a6017c076a194e28f225dd304513a35ea391e1032a55cce85ebbe3aa0532a2" name="cargo1.67" arch="ppc64le">
  <version epoch="0" ver="1.67.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1675080000">Version 1.67.0 (2023-01-26)
  Language
--------
- [Make `Sized` predicates coinductive, allowing cycles.](https://github.com/rust-lang/rust/pull/100386/)
- [`#[must_use]` annotations on `async fn` also affect the `Future::Output`.](https://github.com/rust-lang/rust/pull/100633/)
- [Elaborate supertrait obligations when deducing closure signatures.](https://github.com/rust-lang/rust/pull/101834/)
- [Invalid literals are no longer an error under `cfg(FALSE)`.](https://github.com/rust-lang/rust/pull/102944/)
- [Unreserve braced enum variants in value namespace.](https://github.com/rust-lang/rust/pull/103578/)
  Compiler
--------
- [Enable varargs support for calling conventions other than `C` or `cdecl`.](https://github.com/rust-lang/rust/pull/97971/)
- [Add new MIR constant propagation based on dataflow analysis.](https://github.com/rust-lang/rust/pull/101168/)
- [Optimize field ordering by grouping m\*2^n-sized fields with equivalently aligned ones.](https://github.com/rust-lang/rust/pull/102750/)
- [Stabilize native library modifier `verbatim`.](https://github.com/rust-lang/rust/pull/104360/)
  Added and removed targets:
- [Add a tier 3 target for PowerPC on AIX](https://github.com/rust-lang/rust/pull/102293/), `powerpc64-ibm-aix`.
- [Add a tier 3 target for the Sony PlayStation 1](https://github.com/rust-lang/rust/pull/102689/), `mipsel-sony-psx`.
- [Add tier 3 `no_std` targets for the QNX Neutrino RTOS](https://github.com/rust-lang/rust/pull/102701/),
  `aarch64-unknown-nto-qnx710` and `x86_64-pc-nto-qnx710`.
- [Remove tier 3 `linuxkernel` targets](https://github.com/rust-lang/rust/pull/104015/) (not used by the actual kernel).
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Merge `crossbeam-channel` into `std::sync::mpsc`.](https://github.com/rust-lang/rust/pull/93563/)
- [Fix inconsistent rounding of 0.5 when formatted to 0 decimal places.](https://github.com/rust-lang/rust/pull/102935/)
- [Derive `Eq` and `Hash` for `ControlFlow`.](https://github.com/rust-lang/rust/pull/103084/)
- [Don't build `compiler_builtins` with `-C panic=abort`.](https://github.com/rust-lang/rust/pull/103786/)
  Stabilized APIs
- [`{integer}::checked_ilog`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog)
- [`{integer}::checked_ilog2`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog2)
- [`{integer}::checked_ilog10`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog10)
- [`{integer}::ilog`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog)
- [`{integer}::ilog2`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog2)
- [`{integer}::ilog10`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog10)
- [`NonZeroU*::ilog2`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#method.ilog2)
- [`NonZeroU*::ilog10`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#method.ilog10)
- [`NonZero*::BITS`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#associatedconstant.BITS)
  These APIs are now stable in const contexts:
- [`char::from_u32`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.from_u32)
- [`char::from_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.from_digit)
- [`char::to_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.to_digit)
- [`core::char::from_u32`](https://doc.rust-lang.org/stable/core/char/fn.from_u32.html)
- [`core::char::from_digit`](https://doc.rust-lang.org/stable/core/char/fn.from_digit.html)
  Compatibility Notes
- [The layout of `repr(Rust)` types now groups m\*2^n-sized fields with
  equivalently aligned ones.](https://github.com/rust-lang/rust/pull/102750/)
  This is intended to be an optimization, but it is also known to increase type
  sizes in a few cases for the placement of enum tags. As a reminder, the layout
  of `repr(Rust)` types is an implementation detail, subject to change.
- [0.5 now rounds to 0 when formatted to 0 decimal places.](https://github.com/rust-lang/rust/pull/102935/)
  This makes it consistent with the rest of floating point formatting that
  rounds ties toward even digits.
- [Chains of `&amp;&amp;` and `||` will now drop temporaries from their sub-expressions in
  evaluation order, left-to-right.](https://github.com/rust-lang/rust/pull/103293/)
  Previously, it was "twisted" such that the _first_ expression dropped its
  temporaries _last_, after all of the other expressions dropped in order.
- [Underscore suffixes on string literals are now a hard error.](https://github.com/rust-lang/rust/pull/103914/)
  This has been a future-compatibility warning since 1.20.0.
- [Stop passing `-export-dynamic` to `wasm-ld`.](https://github.com/rust-lang/rust/pull/105405/)
- [`main` is now mangled as `__main_void` on `wasm32-wasi`.](https://github.com/rust-lang/rust/pull/105468/)
- [Cargo now emits an error if there are multiple registries in the configuration
  with the same index URL.](https://github.com/rust-lang/cargo/pull/10592)</changelog>
</package>
<package pkgid="952e28b2f39af010ff1ace89aab40d4256ab887e69629e5cf82c98327116a436" name="cargo1.67" arch="s390x">
  <version epoch="0" ver="1.67.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1675080000">Version 1.67.0 (2023-01-26)
  Language
--------
- [Make `Sized` predicates coinductive, allowing cycles.](https://github.com/rust-lang/rust/pull/100386/)
- [`#[must_use]` annotations on `async fn` also affect the `Future::Output`.](https://github.com/rust-lang/rust/pull/100633/)
- [Elaborate supertrait obligations when deducing closure signatures.](https://github.com/rust-lang/rust/pull/101834/)
- [Invalid literals are no longer an error under `cfg(FALSE)`.](https://github.com/rust-lang/rust/pull/102944/)
- [Unreserve braced enum variants in value namespace.](https://github.com/rust-lang/rust/pull/103578/)
  Compiler
--------
- [Enable varargs support for calling conventions other than `C` or `cdecl`.](https://github.com/rust-lang/rust/pull/97971/)
- [Add new MIR constant propagation based on dataflow analysis.](https://github.com/rust-lang/rust/pull/101168/)
- [Optimize field ordering by grouping m\*2^n-sized fields with equivalently aligned ones.](https://github.com/rust-lang/rust/pull/102750/)
- [Stabilize native library modifier `verbatim`.](https://github.com/rust-lang/rust/pull/104360/)
  Added and removed targets:
- [Add a tier 3 target for PowerPC on AIX](https://github.com/rust-lang/rust/pull/102293/), `powerpc64-ibm-aix`.
- [Add a tier 3 target for the Sony PlayStation 1](https://github.com/rust-lang/rust/pull/102689/), `mipsel-sony-psx`.
- [Add tier 3 `no_std` targets for the QNX Neutrino RTOS](https://github.com/rust-lang/rust/pull/102701/),
  `aarch64-unknown-nto-qnx710` and `x86_64-pc-nto-qnx710`.
- [Remove tier 3 `linuxkernel` targets](https://github.com/rust-lang/rust/pull/104015/) (not used by the actual kernel).
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Merge `crossbeam-channel` into `std::sync::mpsc`.](https://github.com/rust-lang/rust/pull/93563/)
- [Fix inconsistent rounding of 0.5 when formatted to 0 decimal places.](https://github.com/rust-lang/rust/pull/102935/)
- [Derive `Eq` and `Hash` for `ControlFlow`.](https://github.com/rust-lang/rust/pull/103084/)
- [Don't build `compiler_builtins` with `-C panic=abort`.](https://github.com/rust-lang/rust/pull/103786/)
  Stabilized APIs
- [`{integer}::checked_ilog`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog)
- [`{integer}::checked_ilog2`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog2)
- [`{integer}::checked_ilog10`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog10)
- [`{integer}::ilog`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog)
- [`{integer}::ilog2`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog2)
- [`{integer}::ilog10`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog10)
- [`NonZeroU*::ilog2`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#method.ilog2)
- [`NonZeroU*::ilog10`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#method.ilog10)
- [`NonZero*::BITS`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#associatedconstant.BITS)
  These APIs are now stable in const contexts:
- [`char::from_u32`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.from_u32)
- [`char::from_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.from_digit)
- [`char::to_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.to_digit)
- [`core::char::from_u32`](https://doc.rust-lang.org/stable/core/char/fn.from_u32.html)
- [`core::char::from_digit`](https://doc.rust-lang.org/stable/core/char/fn.from_digit.html)
  Compatibility Notes
- [The layout of `repr(Rust)` types now groups m\*2^n-sized fields with
  equivalently aligned ones.](https://github.com/rust-lang/rust/pull/102750/)
  This is intended to be an optimization, but it is also known to increase type
  sizes in a few cases for the placement of enum tags. As a reminder, the layout
  of `repr(Rust)` types is an implementation detail, subject to change.
- [0.5 now rounds to 0 when formatted to 0 decimal places.](https://github.com/rust-lang/rust/pull/102935/)
  This makes it consistent with the rest of floating point formatting that
  rounds ties toward even digits.
- [Chains of `&amp;&amp;` and `||` will now drop temporaries from their sub-expressions in
  evaluation order, left-to-right.](https://github.com/rust-lang/rust/pull/103293/)
  Previously, it was "twisted" such that the _first_ expression dropped its
  temporaries _last_, after all of the other expressions dropped in order.
- [Underscore suffixes on string literals are now a hard error.](https://github.com/rust-lang/rust/pull/103914/)
  This has been a future-compatibility warning since 1.20.0.
- [Stop passing `-export-dynamic` to `wasm-ld`.](https://github.com/rust-lang/rust/pull/105405/)
- [`main` is now mangled as `__main_void` on `wasm32-wasi`.](https://github.com/rust-lang/rust/pull/105468/)
- [Cargo now emits an error if there are multiple registries in the configuration
  with the same index URL.](https://github.com/rust-lang/cargo/pull/10592)</changelog>
</package>
<package pkgid="120fd57dc1bdf7ecfa02113be7673143edf0ffc97c1ac353da45e8329b827563" name="cargo1.67" arch="x86_64">
  <version epoch="0" ver="1.67.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1675080000">Version 1.67.0 (2023-01-26)
  Language
--------
- [Make `Sized` predicates coinductive, allowing cycles.](https://github.com/rust-lang/rust/pull/100386/)
- [`#[must_use]` annotations on `async fn` also affect the `Future::Output`.](https://github.com/rust-lang/rust/pull/100633/)
- [Elaborate supertrait obligations when deducing closure signatures.](https://github.com/rust-lang/rust/pull/101834/)
- [Invalid literals are no longer an error under `cfg(FALSE)`.](https://github.com/rust-lang/rust/pull/102944/)
- [Unreserve braced enum variants in value namespace.](https://github.com/rust-lang/rust/pull/103578/)
  Compiler
--------
- [Enable varargs support for calling conventions other than `C` or `cdecl`.](https://github.com/rust-lang/rust/pull/97971/)
- [Add new MIR constant propagation based on dataflow analysis.](https://github.com/rust-lang/rust/pull/101168/)
- [Optimize field ordering by grouping m\*2^n-sized fields with equivalently aligned ones.](https://github.com/rust-lang/rust/pull/102750/)
- [Stabilize native library modifier `verbatim`.](https://github.com/rust-lang/rust/pull/104360/)
  Added and removed targets:
- [Add a tier 3 target for PowerPC on AIX](https://github.com/rust-lang/rust/pull/102293/), `powerpc64-ibm-aix`.
- [Add a tier 3 target for the Sony PlayStation 1](https://github.com/rust-lang/rust/pull/102689/), `mipsel-sony-psx`.
- [Add tier 3 `no_std` targets for the QNX Neutrino RTOS](https://github.com/rust-lang/rust/pull/102701/),
  `aarch64-unknown-nto-qnx710` and `x86_64-pc-nto-qnx710`.
- [Remove tier 3 `linuxkernel` targets](https://github.com/rust-lang/rust/pull/104015/) (not used by the actual kernel).
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Merge `crossbeam-channel` into `std::sync::mpsc`.](https://github.com/rust-lang/rust/pull/93563/)
- [Fix inconsistent rounding of 0.5 when formatted to 0 decimal places.](https://github.com/rust-lang/rust/pull/102935/)
- [Derive `Eq` and `Hash` for `ControlFlow`.](https://github.com/rust-lang/rust/pull/103084/)
- [Don't build `compiler_builtins` with `-C panic=abort`.](https://github.com/rust-lang/rust/pull/103786/)
  Stabilized APIs
- [`{integer}::checked_ilog`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog)
- [`{integer}::checked_ilog2`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog2)
- [`{integer}::checked_ilog10`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.checked_ilog10)
- [`{integer}::ilog`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog)
- [`{integer}::ilog2`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog2)
- [`{integer}::ilog10`](https://doc.rust-lang.org/stable/std/primitive.i32.html#method.ilog10)
- [`NonZeroU*::ilog2`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#method.ilog2)
- [`NonZeroU*::ilog10`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#method.ilog10)
- [`NonZero*::BITS`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroU32.html#associatedconstant.BITS)
  These APIs are now stable in const contexts:
- [`char::from_u32`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.from_u32)
- [`char::from_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.from_digit)
- [`char::to_digit`](https://doc.rust-lang.org/stable/std/primitive.char.html#method.to_digit)
- [`core::char::from_u32`](https://doc.rust-lang.org/stable/core/char/fn.from_u32.html)
- [`core::char::from_digit`](https://doc.rust-lang.org/stable/core/char/fn.from_digit.html)
  Compatibility Notes
- [The layout of `repr(Rust)` types now groups m\*2^n-sized fields with
  equivalently aligned ones.](https://github.com/rust-lang/rust/pull/102750/)
  This is intended to be an optimization, but it is also known to increase type
  sizes in a few cases for the placement of enum tags. As a reminder, the layout
  of `repr(Rust)` types is an implementation detail, subject to change.
- [0.5 now rounds to 0 when formatted to 0 decimal places.](https://github.com/rust-lang/rust/pull/102935/)
  This makes it consistent with the rest of floating point formatting that
  rounds ties toward even digits.
- [Chains of `&amp;&amp;` and `||` will now drop temporaries from their sub-expressions in
  evaluation order, left-to-right.](https://github.com/rust-lang/rust/pull/103293/)
  Previously, it was "twisted" such that the _first_ expression dropped its
  temporaries _last_, after all of the other expressions dropped in order.
- [Underscore suffixes on string literals are now a hard error.](https://github.com/rust-lang/rust/pull/103914/)
  This has been a future-compatibility warning since 1.20.0.
- [Stop passing `-export-dynamic` to `wasm-ld`.](https://github.com/rust-lang/rust/pull/105405/)
- [`main` is now mangled as `__main_void` on `wasm32-wasi`.](https://github.com/rust-lang/rust/pull/105468/)
- [Cargo now emits an error if there are multiple registries in the configuration
  with the same index URL.](https://github.com/rust-lang/cargo/pull/10592)</changelog>
</package>
<package pkgid="c7b63d6691edeff1dd175e6089ec209110771b1128e3b3faaad47dfc7106e30f" name="catatonit" arch="aarch64">
  <version epoch="0" ver="0.1.7" rel="150300.10.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="c6c7b72866cc6d656a35c5313b3f813f120c91bffd1d16d934e1d7b2d9a37b78" name="catatonit" arch="ppc64le">
  <version epoch="0" ver="0.1.7" rel="150300.10.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="70cb04713078fac490fd02344ac17f2ec65635a2cf721706934648867dbfae6c" name="catatonit" arch="s390x">
  <version epoch="0" ver="0.1.7" rel="150300.10.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="6c4ffab7027536bd5200c9c8e2a8477dffc138b394d1b64c7005aa083b2b75e4" name="catatonit" arch="src">
  <version epoch="0" ver="0.1.7" rel="150300.10.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="ab99ecde9e7f52964b286751593a567884a82014a5a5522b9a5690cffd1b4189" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.1.7" rel="150300.10.3.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="53d7e5b7239530cdc457c6a400acc84ff1e6d6cea901165aafacdc78c32e1d49" name="cd-paranoia" arch="aarch64">
  <version epoch="0" ver="10.2+0.93+1" rel="150000.3.2.1"/>
  <changelog author="davejplater@gmail.com" date="1337428800">- Created libcdio-paranoia which used to be part of the libcdio
  package. see bnc#756564.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to version 10.2+0.90
  * First stable version
- Add libcdio-paranoia-10.2+0.90-include_path.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 10.2+0.93+1
  * Add cdio_cddap_free_messages function
  * Start using Coverty Static analysis
  * Update OS versions we recognize
  * Upgrade libcdio-paranoia to paranoia version 10.2
  * Bug fixes on MS Windows and other bug fixes
  * Redo license so everything is GPL3
- Fix license tag; now released under GPL-3.0
- Remove libcdio-paranoia-10.2+0.90-include_path.patch; fixed on
  upstream
- Bump sonum to 2</changelog>
  <changelog author="olaf@aepfle.de" date="1423224000">- Include all detected libs in pkg-config --libs output
  to fix build of ffmpeg in SLE_11
  libcdio-paranoia.libcdio_cddda-libs.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Fix baselibs.conf: with the update to 10.2+0.93+1, the sonum was
  bumped to 2, but baselibs was forgotten.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
</package>
<package pkgid="de331491db1436bccb5b2a6fea3fc42c88c2110262aef693d0b9aedff46aab40" name="cd-paranoia" arch="ppc64le">
  <version epoch="0" ver="10.2+0.93+1" rel="150000.3.2.1"/>
  <changelog author="davejplater@gmail.com" date="1337428800">- Created libcdio-paranoia which used to be part of the libcdio
  package. see bnc#756564.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to version 10.2+0.90
  * First stable version
- Add libcdio-paranoia-10.2+0.90-include_path.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 10.2+0.93+1
  * Add cdio_cddap_free_messages function
  * Start using Coverty Static analysis
  * Update OS versions we recognize
  * Upgrade libcdio-paranoia to paranoia version 10.2
  * Bug fixes on MS Windows and other bug fixes
  * Redo license so everything is GPL3
- Fix license tag; now released under GPL-3.0
- Remove libcdio-paranoia-10.2+0.90-include_path.patch; fixed on
  upstream
- Bump sonum to 2</changelog>
  <changelog author="olaf@aepfle.de" date="1423224000">- Include all detected libs in pkg-config --libs output
  to fix build of ffmpeg in SLE_11
  libcdio-paranoia.libcdio_cddda-libs.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Fix baselibs.conf: with the update to 10.2+0.93+1, the sonum was
  bumped to 2, but baselibs was forgotten.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
</package>
<package pkgid="b929bc219cace30a12586a9e1fe8ef9e4cfed18b04d54260c7ced13080de5305" name="cd-paranoia" arch="s390x">
  <version epoch="0" ver="10.2+0.93+1" rel="150000.3.2.1"/>
  <changelog author="davejplater@gmail.com" date="1337428800">- Created libcdio-paranoia which used to be part of the libcdio
  package. see bnc#756564.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to version 10.2+0.90
  * First stable version
- Add libcdio-paranoia-10.2+0.90-include_path.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 10.2+0.93+1
  * Add cdio_cddap_free_messages function
  * Start using Coverty Static analysis
  * Update OS versions we recognize
  * Upgrade libcdio-paranoia to paranoia version 10.2
  * Bug fixes on MS Windows and other bug fixes
  * Redo license so everything is GPL3
- Fix license tag; now released under GPL-3.0
- Remove libcdio-paranoia-10.2+0.90-include_path.patch; fixed on
  upstream
- Bump sonum to 2</changelog>
  <changelog author="olaf@aepfle.de" date="1423224000">- Include all detected libs in pkg-config --libs output
  to fix build of ffmpeg in SLE_11
  libcdio-paranoia.libcdio_cddda-libs.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Fix baselibs.conf: with the update to 10.2+0.93+1, the sonum was
  bumped to 2, but baselibs was forgotten.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
</package>
<package pkgid="d577d5bf9d29f08a5ae4c3b31f40f6e8923b9b7ddb3c3318bb9bda38d0dadb84" name="cd-paranoia" arch="x86_64">
  <version epoch="0" ver="10.2+0.93+1" rel="150000.3.2.1"/>
  <changelog author="davejplater@gmail.com" date="1337428800">- Created libcdio-paranoia which used to be part of the libcdio
  package. see bnc#756564.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to version 10.2+0.90
  * First stable version
- Add libcdio-paranoia-10.2+0.90-include_path.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1423051200">- Update to version 10.2+0.93+1
  * Add cdio_cddap_free_messages function
  * Start using Coverty Static analysis
  * Update OS versions we recognize
  * Upgrade libcdio-paranoia to paranoia version 10.2
  * Bug fixes on MS Windows and other bug fixes
  * Redo license so everything is GPL3
- Fix license tag; now released under GPL-3.0
- Remove libcdio-paranoia-10.2+0.90-include_path.patch; fixed on
  upstream
- Bump sonum to 2</changelog>
  <changelog author="olaf@aepfle.de" date="1423224000">- Include all detected libs in pkg-config --libs output
  to fix build of ffmpeg in SLE_11
  libcdio-paranoia.libcdio_cddda-libs.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Fix baselibs.conf: with the update to 10.2+0.93+1, the sonum was
  bumped to 2, but baselibs was forgotten.</changelog>
  <changelog author="olaf@aepfle.de" date="1450267200">- Add BuildRoot: for SLE_11</changelog>
</package>
<package pkgid="7c455ea7ffc8fdf809b65a89404dd9642c49290cf68f6d5a68d0bc3592290d1e" name="celt" arch="aarch64">
  <version epoch="0" ver="0.11.3" rel="150000.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1265803200">- remove suffix patch. rename lib package instead
- add baselibs.conf</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Upgrade to 0.9.1.x
  * improves the packet loss concealment.
  * high-frequency artefacts have been reduced.</changelog>
  <changelog author="davejplater@gmail.com" date="1308657600">- Added source services to update to 0.11.1.
- libcelt0-1 bumped to libcelt0-2 due to "current" increment.
- Upstream changes :
  * fixes two minor bugs with 0.11 that affect the bit-stream.
  The quality should improve (very) slightly, but not enough to be
  noticeable in most cases. Several Opus-related bugs have also
  been fixed.</changelog>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real tar</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel building
- Add celt-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="i@marguerite.su" date="1332590400">- fixed "no dependecies on libcelt*" warning.</changelog>
  <changelog author="cfarrell@suse.com" date="1348142400">- license update: BSD-2-Clause
  See COPYING file</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Update to 0.11.3
  * no upstream changelog provided
- Cleanup spec file with spec-cleaner
- Update baselibs.conf</changelog>
</package>
<package pkgid="6a85e5fd81d266e3a5e4788197e2b31ec658b222960493b4b0b7e31feb0c4e81" name="celt" arch="ppc64le">
  <version epoch="0" ver="0.11.3" rel="150000.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1265803200">- remove suffix patch. rename lib package instead
- add baselibs.conf</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Upgrade to 0.9.1.x
  * improves the packet loss concealment.
  * high-frequency artefacts have been reduced.</changelog>
  <changelog author="davejplater@gmail.com" date="1308657600">- Added source services to update to 0.11.1.
- libcelt0-1 bumped to libcelt0-2 due to "current" increment.
- Upstream changes :
  * fixes two minor bugs with 0.11 that affect the bit-stream.
  The quality should improve (very) slightly, but not enough to be
  noticeable in most cases. Several Opus-related bugs have also
  been fixed.</changelog>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real tar</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel building
- Add celt-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="i@marguerite.su" date="1332590400">- fixed "no dependecies on libcelt*" warning.</changelog>
  <changelog author="cfarrell@suse.com" date="1348142400">- license update: BSD-2-Clause
  See COPYING file</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Update to 0.11.3
  * no upstream changelog provided
- Cleanup spec file with spec-cleaner
- Update baselibs.conf</changelog>
</package>
<package pkgid="6fe725a5fe625c9138001e3d6dc6162e3ce6697524c590b46a25ae749c4158aa" name="celt" arch="s390x">
  <version epoch="0" ver="0.11.3" rel="150000.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1265803200">- remove suffix patch. rename lib package instead
- add baselibs.conf</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Upgrade to 0.9.1.x
  * improves the packet loss concealment.
  * high-frequency artefacts have been reduced.</changelog>
  <changelog author="davejplater@gmail.com" date="1308657600">- Added source services to update to 0.11.1.
- libcelt0-1 bumped to libcelt0-2 due to "current" increment.
- Upstream changes :
  * fixes two minor bugs with 0.11 that affect the bit-stream.
  The quality should improve (very) slightly, but not enough to be
  noticeable in most cases. Several Opus-related bugs have also
  been fixed.</changelog>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real tar</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel building
- Add celt-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="i@marguerite.su" date="1332590400">- fixed "no dependecies on libcelt*" warning.</changelog>
  <changelog author="cfarrell@suse.com" date="1348142400">- license update: BSD-2-Clause
  See COPYING file</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Update to 0.11.3
  * no upstream changelog provided
- Cleanup spec file with spec-cleaner
- Update baselibs.conf</changelog>
</package>
<package pkgid="9aa775ed955b54c6615098ebded4fe19bcf1b9ed58a7b81aa48595664084b43f" name="celt" arch="src">
  <version epoch="0" ver="0.11.3" rel="150000.3.3.1"/>
  <changelog author="crrodriguez@suse.de" date="1228132800">- initial package version</changelog>
  <changelog author="sbrabec@suse.cz" date="1250078400">- Updated to version 0.6.1:
  * Breaks bit-stream compatibility!
  * Improves the stereo quality, especially at lower bit-rates.
  * Many quality improvements, including better stereo coupling,
    better handling of transients, and better handling of highly
    tonal signals, packet loss robustness, larger dynamic range,
    suitable for encoding 24-bit audio, VBR implementation.
  * Pitch prediction improved and simplified.
  * New bit allocation algorithm.
  * VQ search has been improved, small CPU reduction.
  * Fixing some quality problems with low frequency tones.
  * Many bug fixes.</changelog>
  <changelog author="davejplater@gmail.com" date="1265284800">- Update to version 0.7.1
- Patch celt-0.7.1-libceltsuffix.patch removes the suffix from
  libcelt to keep the build service happy.
  * improves the quality of the packet loss concealment (PLC),
    but does not change the rest of the codec. For this reason it
    is the first release not to break bit-stream compatibility with
    the previous release (0.7.0).
    The default name of the library was changed to libcelt0.so to
    make it easier to do the transition when the final 1.0 release
    comes out (with frozen bit-stream and API).
  * CELT 0.7.0 again improves the stereo quality, reduces artefacts
    at low bitrates (birdies and speech roughness) and fixes many
    bugs. In addition to the usual bitstream incompatibilities,
    the API has also changed in this release.</changelog>
  <changelog author="lnussel@suse.de" date="1265803200">- remove suffix patch. rename lib package instead
- add baselibs.conf</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Upgrade to 0.9.1.x
  * improves the packet loss concealment.
  * high-frequency artefacts have been reduced.</changelog>
  <changelog author="davejplater@gmail.com" date="1308657600">- Added source services to update to 0.11.1.
- libcelt0-1 bumped to libcelt0-2 due to "current" increment.
- Upstream changes :
  * fixes two minor bugs with 0.11 that affect the bit-stream.
  The quality should improve (very) slightly, but not enough to be
  noticeable in most cases. Several Opus-related bugs have also
  been fixed.</changelog>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real tar</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel building
- Add celt-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="i@marguerite.su" date="1332590400">- fixed "no dependecies on libcelt*" warning.</changelog>
  <changelog author="cfarrell@suse.com" date="1348142400">- license update: BSD-2-Clause
  See COPYING file</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Update to 0.11.3
  * no upstream changelog provided
- Cleanup spec file with spec-cleaner
- Update baselibs.conf</changelog>
</package>
<package pkgid="abe1a65da7cebceda408cb2c407d9e2f22faa3ebb43f7bd32aaf4454f137e76a" name="celt" arch="x86_64">
  <version epoch="0" ver="0.11.3" rel="150000.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1265803200">- remove suffix patch. rename lib package instead
- add baselibs.conf</changelog>
  <changelog author="coolo@novell.com" date="1272110400">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- Upgrade to 0.9.1.x
  * improves the packet loss concealment.
  * high-frequency artefacts have been reduced.</changelog>
  <changelog author="davejplater@gmail.com" date="1308657600">- Added source services to update to 0.11.1.
- libcelt0-1 bumped to libcelt0-2 due to "current" increment.
- Upstream changes :
  * fixes two minor bugs with 0.11 that affect the bit-stream.
  The quality should improve (very) slightly, but not enough to be
  noticeable in most cases. Several Opus-related bugs have also
  been fixed.</changelog>
  <changelog author="coolo@suse.com" date="1315569600">- replace _service with real tar</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel building
- Add celt-devel to baselibs</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="i@marguerite.su" date="1332590400">- fixed "no dependecies on libcelt*" warning.</changelog>
  <changelog author="cfarrell@suse.com" date="1348142400">- license update: BSD-2-Clause
  See COPYING file</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Update to 0.11.3
  * no upstream changelog provided
- Cleanup spec file with spec-cleaner
- Update baselibs.conf</changelog>
</package>
<package pkgid="e7ef76eebbe0b057610e7c68f66a584662b9b3e47d999f2599e0e9b4c7b140c7" name="cepces" arch="noarch">
  <version epoch="0" ver="0.3.4" rel="150400.3.3.1"/>
  <changelog author="daniel.uvehag@gmail.com" date="1467028800">- Initial package.</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517486400">- Update to version 0.2.1-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517832000">- Update to version 0.3.0-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401600">- Update to version 0.3.3-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401601">- Add missing log directory</changelog>
  <changelog author="dmulder@suse.com" date="1624968000">- v0.3.3: Initial submission of sources; (jsc#SLE-18457).</changelog>
  <changelog author="dmulder@suse.com" date="1626091200">- v0.3.4: Allow overriding of parameters from the command line
  - Removed upstreamed patch 0001-Added-Kerberos-delegation.patch
  - Removed upstreamed patch 0001-Allow-overriding-of-server-auth-from-the-command-lin.patch
  - Removed upstreamed patch 0001-add-SELinux-permissions-for-RHEL-6.patch</changelog>
  <changelog author="dmulder@suse.com" date="1626696000">- Fix configuration missing global section.
- Add a test runner for executing unittests, and github CI.</changelog>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix cepces won't compile on SLE15SP5; (bsc#1203273).</changelog>
</package>
<package pkgid="2c001215cb09ab6ceeae2519519f940563c3caccfe9afa40d4a34763fd99867a" name="cepces" arch="src">
  <version epoch="0" ver="0.3.4" rel="150400.3.3.1"/>
  <changelog author="daniel.uvehag@gmail.com" date="1467028800">- Initial package.</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517486400">- Update to version 0.2.1-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517832000">- Update to version 0.3.0-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401600">- Update to version 0.3.3-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401601">- Add missing log directory</changelog>
  <changelog author="dmulder@suse.com" date="1624968000">- v0.3.3: Initial submission of sources; (jsc#SLE-18457).</changelog>
  <changelog author="dmulder@suse.com" date="1626091200">- v0.3.4: Allow overriding of parameters from the command line
  - Removed upstreamed patch 0001-Added-Kerberos-delegation.patch
  - Removed upstreamed patch 0001-Allow-overriding-of-server-auth-from-the-command-lin.patch
  - Removed upstreamed patch 0001-add-SELinux-permissions-for-RHEL-6.patch</changelog>
  <changelog author="dmulder@suse.com" date="1626696000">- Fix configuration missing global section.
- Add a test runner for executing unittests, and github CI.</changelog>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix cepces won't compile on SLE15SP5; (bsc#1203273).</changelog>
</package>
<package pkgid="afd66a21b41da8f0d4007ff6504ad35950cceb121bd04d5f74581b4fed941ada" name="cepces" arch="noarch">
  <version epoch="0" ver="0.3.4" rel="150400.3.6.1"/>
  <changelog author="daniel.uvehag@gmail.com" date="1467028800">- Initial package.</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517486400">- Update to version 0.2.1-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517832000">- Update to version 0.3.0-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401600">- Update to version 0.3.3-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401601">- Add missing log directory</changelog>
  <changelog author="dmulder@suse.com" date="1624968000">- v0.3.3: Initial submission of sources; (jsc#SLE-18457).</changelog>
  <changelog author="dmulder@suse.com" date="1626091200">- v0.3.4: Allow overriding of parameters from the command line
  - Removed upstreamed patch 0001-Added-Kerberos-delegation.patch
  - Removed upstreamed patch 0001-Allow-overriding-of-server-auth-from-the-command-lin.patch
  - Removed upstreamed patch 0001-add-SELinux-permissions-for-RHEL-6.patch</changelog>
  <changelog author="dmulder@suse.com" date="1626696000">- Fix configuration missing global section.
- Add a test runner for executing unittests, and github CI.</changelog>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix cepces won't compile on SLE15SP5; (bsc#1203273).</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Make the openssl security level configurable; (bsc#1204788).</changelog>
</package>
<package pkgid="5681fd6c0709afd4b74310a5f99cf7551ef6383ff59fc0b4f708a3893b487015" name="cepces" arch="src">
  <version epoch="0" ver="0.3.4" rel="150400.3.6.1"/>
  <changelog author="daniel.uvehag@gmail.com" date="1467028800">- Initial package.</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517486400">- Update to version 0.2.1-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517832000">- Update to version 0.3.0-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401600">- Update to version 0.3.3-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401601">- Add missing log directory</changelog>
  <changelog author="dmulder@suse.com" date="1624968000">- v0.3.3: Initial submission of sources; (jsc#SLE-18457).</changelog>
  <changelog author="dmulder@suse.com" date="1626091200">- v0.3.4: Allow overriding of parameters from the command line
  - Removed upstreamed patch 0001-Added-Kerberos-delegation.patch
  - Removed upstreamed patch 0001-Allow-overriding-of-server-auth-from-the-command-lin.patch
  - Removed upstreamed patch 0001-add-SELinux-permissions-for-RHEL-6.patch</changelog>
  <changelog author="dmulder@suse.com" date="1626696000">- Fix configuration missing global section.
- Add a test runner for executing unittests, and github CI.</changelog>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix cepces won't compile on SLE15SP5; (bsc#1203273).</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Make the openssl security level configurable; (bsc#1204788).</changelog>
</package>
<package pkgid="d154bb25a9e854e792834f4af687027b6feec369e6d5d20d7b73318bc125733a" name="cepces-certmonger" arch="noarch">
  <version epoch="0" ver="0.3.4" rel="150400.3.3.1"/>
  <changelog author="daniel.uvehag@gmail.com" date="1467028800">- Initial package.</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517486400">- Update to version 0.2.1-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517832000">- Update to version 0.3.0-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401600">- Update to version 0.3.3-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401601">- Add missing log directory</changelog>
  <changelog author="dmulder@suse.com" date="1624968000">- v0.3.3: Initial submission of sources; (jsc#SLE-18457).</changelog>
  <changelog author="dmulder@suse.com" date="1626091200">- v0.3.4: Allow overriding of parameters from the command line
  - Removed upstreamed patch 0001-Added-Kerberos-delegation.patch
  - Removed upstreamed patch 0001-Allow-overriding-of-server-auth-from-the-command-lin.patch
  - Removed upstreamed patch 0001-add-SELinux-permissions-for-RHEL-6.patch</changelog>
  <changelog author="dmulder@suse.com" date="1626696000">- Fix configuration missing global section.
- Add a test runner for executing unittests, and github CI.</changelog>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix cepces won't compile on SLE15SP5; (bsc#1203273).</changelog>
</package>
<package pkgid="664906fae1dd4ace34a6b621999104d265704cf29194779cd1089edd9847fa10" name="cepces-certmonger" arch="noarch">
  <version epoch="0" ver="0.3.4" rel="150400.3.6.1"/>
  <changelog author="daniel.uvehag@gmail.com" date="1467028800">- Initial package.</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517486400">- Update to version 0.2.1-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1517832000">- Update to version 0.3.0-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401600">- Update to version 0.3.3-1</changelog>
  <changelog author="daniel.uvehag@gmail.com" date="1564401601">- Add missing log directory</changelog>
  <changelog author="dmulder@suse.com" date="1624968000">- v0.3.3: Initial submission of sources; (jsc#SLE-18457).</changelog>
  <changelog author="dmulder@suse.com" date="1626091200">- v0.3.4: Allow overriding of parameters from the command line
  - Removed upstreamed patch 0001-Added-Kerberos-delegation.patch
  - Removed upstreamed patch 0001-Allow-overriding-of-server-auth-from-the-command-lin.patch
  - Removed upstreamed patch 0001-add-SELinux-permissions-for-RHEL-6.patch</changelog>
  <changelog author="dmulder@suse.com" date="1626696000">- Fix configuration missing global section.
- Add a test runner for executing unittests, and github CI.</changelog>
  <changelog author="dmulder@suse.com" date="1629374400">- Disable selinux where not supported; (jsc#SLE-18456).</changelog>
  <changelog author="david.mulder@suse.com" date="1633435200">- Also disable selinux in 15.4, since it is still not supported.</changelog>
  <changelog author="fvogt@suse.com" date="1633521600">- Only install the selinux policy if necessary
- Add missing dependency on the main package to the certmonger
  subpackage
- Use %license and move it to the common subpackage
- Avoid bashisms
- Fix file list for the python subpackage for 3.10+</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix cepces won't compile on SLE15SP5; (bsc#1203273).</changelog>
  <changelog author="dmulder@suse.com" date="1669896000">- Make the openssl security level configurable; (bsc#1204788).</changelog>
</package>
<package pkgid="2d1adf5a5072e60de122d0a04e549810e5025d0458b921920c3bba420f7652f4" name="ceph" arch="src">
  <version epoch="0" ver="15.2.16.99+g96ce9b152f5" rel="150200.3.37.1"/>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="ncutler@suse.com" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="ncutler@suse.com" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="ncutler@suse.com" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="ncutler@suse.com" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
  <changelog author="ncutler@suse.com" date="1631620800">- Update to 15.2.14-86-g25f8e6a7abf:
  + (jsc#SES-704) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
    (fixes an issue caused by downstream commit "pybing/mgr/mgr_module: allow
    keyword arguments")</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 15.2.15-83-gf72054fa653:
  + rebase on top of Ceph v15.2.15 tag
    https://ceph.io/releases/v15-2-15-octopus-released/
  + (bsc#1192840) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
  + re-do some downstream patches
  * patches dropped:
    "cephadm: use full qualified image names for cephadm"
    "Switch to CaaSP v4.5 container images"
    "cephadm: Update Grafana container image from 7.0.3"
  * replaced by:
    "cephadm: downstream-ify default container image paths"</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to v15.2.16
  + rebase on top of Ceph v15.2.16 tag v15.2.16
  + https://ceph.io/en/news/blog/2022/v15-2-16-octopus-released/
  + (bsc#1192838) cephadm: Fix iscsi client caps (allow mgr &lt;service status&gt; calls) - https://github.com/ceph/ceph/pull/43822 (Merged)
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1647604800">- Update to v15.2.16-93-gafbeee1955c
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="stefen.allen@suse.com" date="1648555200">- Update to v15.2.16-97-ge5eb7a74fdf
  + (pr#464) ses7: mgr/cephadm: try to get FQDN for configuration files
  + (pr#466) cephadm: infer the default container image during pull
  + (pr#444) [SES7] Notify user that there is a SES7.1 upgrade available</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v15.2.16-99-g96ce9b152f5
  + (bsc#1196733) ceph.spec.in: remove build directory during %clean</changelog>
</package>
<package pkgid="cf2415cccf0df55503b713ccb408cc286e337922524f0b87efd621b681ef4cb9" name="ceph" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="0edded06d2ec37db7202b0b0e2ae40f084518e386d083cf9da24cdb0c0d7a560" name="ceph" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="40d53679f981031b7546686a9f7a55dad099e14253557681ae1111e887f03a16" name="ceph" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="31b334e36992cc960d85805f0827e5fac37bb5a7050c61a6b94733bbd1f6f4cb" name="ceph" arch="src">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="1c857e0f4f41ee6dc9b067fa55debec4f2fdc94112c98875269e1a2e8196bc32" name="ceph" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="78a9fbe58dbc43616e4eebdf7e29b519dbb38af98ad4fe742eb0dc044e89ab1c" name="ceph-base" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="d5405d04f14cdc84456e864f765b984945b5f094b1652ca7e492673610ed3c3d" name="ceph-base" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="7350f3f59db85b37e8261da6646e016927aea624155f88cf60d6bde3fe5d8788" name="ceph-base" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="23ad9fbc707d4cf0f5004dd98a5e14f7def73c772b33d6b6f86cc3d25becfb43" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="8d026aec8e54b3b3cd0462047978d35bc8e5b3e24b1d1e92940e22dd1c51fea0" name="ceph-common" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="09bed5cae5849f29d748f5c8e9c30d0a4ca078ed26aff0b98a17d722c6dc0751" name="ceph-common" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="56e9062084296f222783a79fad384ad91b11edd28f8c315d0d289b6bb9eb77e3" name="ceph-common" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="bfee808d2f1c6999ede1ce53e8c5ded6cc7d42cefe1af3bf51652445f1428044" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="c7c927a8a7bf8fbe1f7c4d07701ae2b1e8dd3fbb01f9c27ef74f4d540faee4b3" name="ceph-fuse" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="16d89c21a09923c71e82a110a759d278601d89d4ff316a33e9ae0404029fee0e" name="ceph-fuse" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="88b6a8b8e7b8ea791dfdb7e1d2ceca790e518ed880ff11f412d90d1272ef687d" name="ceph-fuse" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="3ffd5eb3c15a538eb31d40d3807d8f39486f8bd11c35a15d8b5bb99ccbb2fd9a" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="889959989d2546d5f69178629708b6c79c1fbdfcbba4c5e08b60dd0feb7730b6" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="a8db4b07010da017c53ad614409aeeb21854807d9db82b592d88b2f59b3838be" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="a6ef7b2d86a19bbd6729e1b9896c92309f4c779ce573153ad3dbad40385efe0d" name="ceph-immutable-object-cache" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="3512dc1b3a767c5853357535e3e962f8963fb254349b6239b5794b3ddef448b2" name="ceph-immutable-object-cache" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="81305ae87bba9ff4cc3c2678c064bfb273f64345ca45605aadec5e3191240f0f" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="158315da852f4cc21c6e745dbaa640c19af4a81960b1ab7cc237d0bd6fe4aa19" name="ceph-mds" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="5f3027c7a2c7d50bb168b625ce9401e0252cd988840938a2962d8487d60b9389" name="ceph-mds" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="5f9e0a2d79d818864b7abeb258a2bdff00bf635de3df2d66bfabb563addcf3f7" name="ceph-mds" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="df195c295b7252cb51fce3836f69ad0cbae1d42ea4feda397282b9abfae0d34b" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="05c69f1b229f75b091d66463d4b19ce42eb3498e1dfec8341d26b8bd9911adb6" name="ceph-mgr" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="493879cf30dd88c1efa0fb3e99ca9742f16b9c2c5885e45cc72b93240f508342" name="ceph-mgr" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="3fc45dbc7e40d6f6f34bb54d54b1683bdc855d24c9f95ee6d40909f146902d89" name="ceph-mgr" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="f11f7dfc0bec3b775054f6550eb2c00e556948fba9dbdc1877d20ce6a28824f2" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="52384e4bd301608815bb39234e55a6bc352b5b9231e259e74d3e165493bcc536" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="52729be80951d377222ff3281c759c875499bde9f46922f27e266f1bbd7a5a2e" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="419d7e2de68b88608227f67192b9d32b825ac5d6b3eefe9210d42fb211e14aa2" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.16.99+g96ce9b152f5" rel="150200.3.37.1"/>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="ncutler@suse.com" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="ncutler@suse.com" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="ncutler@suse.com" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="ncutler@suse.com" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
  <changelog author="ncutler@suse.com" date="1631620800">- Update to 15.2.14-86-g25f8e6a7abf:
  + (jsc#SES-704) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
    (fixes an issue caused by downstream commit "pybing/mgr/mgr_module: allow
    keyword arguments")</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 15.2.15-83-gf72054fa653:
  + rebase on top of Ceph v15.2.15 tag
    https://ceph.io/releases/v15-2-15-octopus-released/
  + (bsc#1192840) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
  + re-do some downstream patches
  * patches dropped:
    "cephadm: use full qualified image names for cephadm"
    "Switch to CaaSP v4.5 container images"
    "cephadm: Update Grafana container image from 7.0.3"
  * replaced by:
    "cephadm: downstream-ify default container image paths"</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to v15.2.16
  + rebase on top of Ceph v15.2.16 tag v15.2.16
  + https://ceph.io/en/news/blog/2022/v15-2-16-octopus-released/
  + (bsc#1192838) cephadm: Fix iscsi client caps (allow mgr &lt;service status&gt; calls) - https://github.com/ceph/ceph/pull/43822 (Merged)
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1647604800">- Update to v15.2.16-93-gafbeee1955c
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="stefen.allen@suse.com" date="1648555200">- Update to v15.2.16-97-ge5eb7a74fdf
  + (pr#464) ses7: mgr/cephadm: try to get FQDN for configuration files
  + (pr#466) cephadm: infer the default container image during pull
  + (pr#444) [SES7] Notify user that there is a SES7.1 upgrade available</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v15.2.16-99-g96ce9b152f5
  + (bsc#1196733) ceph.spec.in: remove build directory during %clean</changelog>
</package>
<package pkgid="9bf172b5653eb447cc5a5d25dfd2ddca3f6a3d9498fba05a84b5ad1bb7b216f8" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="5ac834c3d79cb7fad77c9610aef0f21af4a56c7ff0c8d2a652064bc18d3182b5" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="5d657d2afc8d7bcfb55d7aa91e1e86f9fb8e715395fb42f3d417866178a460ba" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="20f023d33c6f9205363fcb5a2eec8570b9c8ff208ccc56d92c879050969f60a5" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="6e753758aba908353dfacd4c91d73cd0d33352ec929766ad5b1ba2f9dd64d191" name="ceph-mon" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="ac00514d4d02e2706d15a83c4126e13909a22497498df0d5a7aa7280716c47f9" name="ceph-mon" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="68216cf0ff14a4181683d7e44cd40a0c1261380260e378773539c85751955ce4" name="ceph-mon" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="d92f35ddd31de1d9d8faeb7898039b8ccfc9f937fb4a57c007ca7a96224ff717" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="01f3a68148ac394f4e37127127ddb740f2b97bbf9ac314c9d78b3f1cafb4faa4" name="ceph-osd" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="e07a1fcb1ec672a28c4b5327c12c508cabb8a53b808cdf639554d6cacd9c709f" name="ceph-osd" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="fe97c5b5d5488bcc79782ca080cbb092a3da91db8506f15caae27615940cbe61" name="ceph-osd" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="749c0de7a4add10fa73eb34162713be42a202d77ced91ef239938833c0ae4cce" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="847e73d9cf3bb49c2cb6080535151a1847f25ad30eb8d3620215658b654e6c31" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="4bc0dccbc6a7b5dd28a9cd04b7710c0b2cac4e451a447ff69fb62a654416027c" name="ceph-radosgw" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="1b70a4ed4a5fde089dca982778d259709a1ed5a6c14c572944f9527cdfd9bf65" name="ceph-radosgw" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="cb1d70b6cb8a6bb7e28f2ebfcbecbafe3340d219f2012bca72be6ef5636d77c9" name="ceph-radosgw" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="3a9c1eaf470e998dfc5ae2d4d00f3bd49343b0ec71abd032c3e7de70182a982f" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="6f19d6c10d4c272e24c2f8d7a5a6a75e8f9bcc37fb24d8d8ced99ac62562f272" name="ceph-test" arch="src">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="226420efebb5b6a7d0cc74b926e5aed8e39b42fafbfa4becbdf3f98e7ed7bb09" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="80b78255bdbbf6b273abcf49d9cc04bac16a179f8bb92cef5b8fb4dc3cc5c89c" name="cephadm" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="903c0f2d02dccf4cef81dbe7ca9b131629de76dd631fea57fa6c333f8902bf8c" name="cephfs-mirror" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="5628d1066d3711be07da57e27fee7e7b5527d439548196698c17b81ac93fb29b" name="cephfs-mirror" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="721ca3a73479ba685eb59a4a45a28f77b90fc1ab9d7702dff94564743e3a1f97" name="cephfs-mirror" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="37c4041610757383193f61103b7238b6e7b478a0b837f1b56b080903cd9387f5" name="cephfs-mirror" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="c7e6557a5f356f789eeda470257baeabde14d1999857cc1ca72cd1830c5c927d" name="cephfs-shell" arch="aarch64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="3e5c5fa7a06ef1b0011fa31c7ba0a6fb4a8ba381890e1a1e312ec8f93d9b088b" name="cephfs-shell" arch="ppc64le">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="512353eb810cea68fc02be2e366bcfc5d76e1c420686b8c5a37638ebb3f45dbb" name="cephfs-shell" arch="s390x">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="d5f8274c848252d7af256040fb16a52b0b27afc59d6e36ef1a9bc3969d8585fb" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="ae275c7ca31c8ff08e91685fefcaea9917470b7888521b79aa3cf60e1a1b687a" name="cephfs-top" arch="noarch">
  <version epoch="0" ver="16.2.9.536+g41a9f9a5573" rel="150400.3.3.1"/>
  <changelog author="ncutler@suse.com" date="1626955200">- Update to 16.2.5-110-gc5d9c915c46:
  + rebased on top of upstream commit SHA1 7feddc9819ca05586f230accd67b4e26a328e618
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path</changelog>
  <changelog author="ncutler@suse.com" date="1627387200">- Update to 16.2.5-111-ga5b472dfcf8:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9</changelog>
  <changelog author="ncutler@suse.com" date="1627646400">- Update to 16.2.5-113-g8b5bda7684e:
  + (bsc#1188741) compression/snappy: use uint32_t to be compatible with 1.1.9
    improved version of patch that did not work as intended</changelog>
  <changelog author="ncutler@suse.com" date="1630584000">- Update to 16.2.5-504-g6a3a59bd19e:
  + rebased on top of upstream commit SHA1 0d1e1f2973cae7645126fc88a72743367c790d9d
  + (bsc#1189605) cmake: exclude "grafonnet-lib" target from "all"</changelog>
  <changelog author="sallen@suse.com" date="1632139200">- Update to Version: 16.2.6.45+g8fda9838398:
  + rebased on top of upstream commit SHA1 dbc87327c37d0f305c2107e487cb98a072ae858b
    upstream 16.2.6 release
    https://ceph.io/releases/v16-2-6-pacific-released/</changelog>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)</changelog>
</package>
<package pkgid="f19501763ed70ec67191b5eaa249a5926ceeefb7bf6520d3018d554a87ed7dee" name="certmonger" arch="aarch64">
  <version epoch="0" ver="0.79.13" rel="150400.3.3.1"/>
  <changelog author="stasiek@michalski.cc" date="1586692800">- Initial package</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="hel@lcp.world" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="william.brown@suse.com" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="ngompa13@gmail.com" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
</package>
<package pkgid="a2c56183ca1546d4decb1847dd9b4a9649b8b6e6da4111d09b2b605760267816" name="certmonger" arch="ppc64le">
  <version epoch="0" ver="0.79.13" rel="150400.3.3.1"/>
  <changelog author="stasiek@michalski.cc" date="1586692800">- Initial package</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="hel@lcp.world" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="william.brown@suse.com" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="ngompa13@gmail.com" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
</package>
<package pkgid="aaf5f5aa4ecf2ec516ca14e266bf7a25ff5d9a88cf4990f37b37aa4aed73e1a7" name="certmonger" arch="s390x">
  <version epoch="0" ver="0.79.13" rel="150400.3.3.1"/>
  <changelog author="stasiek@michalski.cc" date="1586692800">- Initial package</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="hel@lcp.world" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="william.brown@suse.com" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="ngompa13@gmail.com" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
</package>
<package pkgid="04496391c7a4575335947f5ff25b9861a55fa0e50977dbf09d948b63aa6ec8b3" name="certmonger" arch="src">
  <version epoch="0" ver="0.79.13" rel="150400.3.3.1"/>
  <changelog author="stasiek@michalski.cc" date="1586692800">- Initial package</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="hel@lcp.world" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="william.brown@suse.com" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="ngompa13@gmail.com" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
</package>
<package pkgid="e1d467e7b1c9dfd6ad339a03c7834621992d90e31b168d84ac81fe6ee011a3f0" name="certmonger" arch="x86_64">
  <version epoch="0" ver="0.79.13" rel="150400.3.3.1"/>
  <changelog author="stasiek@michalski.cc" date="1586692800">- Initial package</changelog>
  <changelog author="dmueller@suse.com" date="1598875200">- update to 0.79.11:
  - Fix crash bug when generating thumbprints
  - dogtag: use POST for profileProcess requests
  - Improve logging in SCEP helper
  - Add verbose option to SCEP CA if requested in add-scep-ca
  - Re-order the way the SCEP signing and CA certs are collected
  - Add new option to allow overriding the detected SCEP CA chain
  - template_profile, issuer and MS certificate template are single-value
  - Ensure that files read in have a trailing new-line
  - Adapt to the new behavior of disconnect in dbus-broker
  - Add long command-line options to CLI and man pages
  - Include &amp;message=CA-IDENT with GetCACaps and GetCACert requests
  - Address issues uncovered by clang and Coverity
  - Handle an uninitialized token when adding CA certs to an NSS db
  - tests: Parametrize 025-casave with NSS db types</changelog>
  <changelog author="hel@lcp.world" date="1614513600">- Update to 0.79.13</changelog>
  <changelog author="william.brown@suse.com" date="1627300800">- Add buildrequires on systemd which is required for correct installation
  of the .service file.</changelog>
  <changelog author="ngompa13@gmail.com" date="1627300801">- Use "pkgconfig(systemd)" for the BR to allow hacksaw systemd-mini
  package to satisfy dependencies in the openSUSE Build Service.</changelog>
</package>
<package pkgid="26e329321d7f1eb4df42175ab49a3c2edba93e8f3433d192f139fe6133a8a811" name="cifs-utils" arch="aarch64">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="d055177a5284ad363bf8faa14e67338975cdce4f24a7a8b8b57b4b57f68f4fc0" name="cifs-utils" arch="ppc64le">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="5b6db955264cfcefea543218196b90c3e5ae3f4d006a07a059a90722d8a1cb33" name="cifs-utils" arch="s390x">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="630c09e107fbc24f7229271afe844a32c5b50a2aa4d998d7d57f8fb448e260a7" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="2a9ee9eea8b1cb2b0351d3b9d5f88deaf79b0d22283f184ce95546b92143dfc1" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="f8d97c5f15149e5a45a927848ccc7bc8a9c493613d5f4ffb9cac41f62e39dd93" name="cifs-utils" arch="aarch64">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="43c6eabb7b387ce919bcbd23e38bf49527f04c2c6ad5da374b2c3351dd8367a2" name="cifs-utils" arch="ppc64le">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="63046c622ea74b15151f1edc632ffd44590ad941f598a8125c3ff3e46e05e3f4" name="cifs-utils" arch="s390x">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="f3ec9c7d020a8057caef20f997795b25ada99f56b52aceacd5ec01bdcdc61c1c" name="cifs-utils" arch="src">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="fddf351ab7fba69399ef13d048600d7a84f7d9324f28e01f027589a9e617b9de" name="cifs-utils" arch="x86_64">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="5c71e5041f010260ffcbbd9b9f34aa63d7bb852e69dfa85201ff15e50c463b14" name="cifs-utils-devel" arch="aarch64">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="7e05f4833256bce313ba285871f6053af197a01b4b881a2d26c96df00917ec70" name="cifs-utils-devel" arch="ppc64le">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="58855b84dfb2c5aeee00d17b463cb08a2b49f0423677253b597ef7b3670579ff" name="cifs-utils-devel" arch="s390x">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="06af576c81481739d1a917137a1a18ec7400e061cf484a4619dab079468c34d4" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.15" rel="150400.3.6.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing</changelog>
</package>
<package pkgid="4fcb09467136742162e52f4952ce0e9273b7a0ad90a7352c8e04865ff5f35d06" name="cifs-utils-devel" arch="aarch64">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="c4a628885cbf5af77897a1feb00b09d6750829ca16b1e08548b252442c5e7a89" name="cifs-utils-devel" arch="ppc64le">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="c90236c349aa6ec36d69adc3b7f24889b1aa4fd1513133819fbec5cbe956d834" name="cifs-utils-devel" arch="s390x">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="ed59e7cd9ecf01072be2cd8ddf36bde91b36ddfbdeeadf77b44f6ac26073907f" name="cifs-utils-devel" arch="x86_64">
  <version epoch="0" ver="6.15" rel="150400.3.9.1"/>
  <changelog author="dmulder@suse.com" date="1549886400">- Fix python dependency stalemate by requiring python3 version of
  samba-libs.</changelog>
  <changelog author="aaptel@suse.com" date="1549972800">- Document new SMB2.1+ defaults; (bsc#1130528).
  * be more verbose on mount errors, especially with EHOSTDOWN which
    is often returned on SMB version issues.
  * add suse-document-new-vers-default-SMB2.1.patch</changelog>
  <changelog author="aaptel@suse.com" date="1550145600">- Allow cached DNS entry to expire; (fate#325270).
  * add allow-dns-resolver-key-to-expire.patch</changelog>
  <changelog author="palcantara@suse.de" date="1552392000">- Fix dependency failure on SLE15 regarding python2/python3.</changelog>
  <changelog author="aaptel@suse.com" date="1565870400">- Update to cifs-utils 6.9; (bsc#1132087); (bsc#1136031).
  * adds fixes for Azure
  * new smbinfo utility
  * remove cifs-utils-6.8.tar.bz2
  * remove cifs-utils-6.8.tar.bz2.asc
  * add cifs-utils-6.9.tar.bz2
  * add cifs-utils-6.9.tar.bz2.asc
  * add 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * add 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * add 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * add 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * add 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * add 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * add 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * add 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * add 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * add 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
- Remove backports that are already in 6.9; (fate#325270); (bsc#1130528);
  * remove 0001-docs-cleanup-rst-formating.patch
  * remove 0002-mount.cifs.rst-document-new-no-handlecache-mount-opt.patch
  * remove 0003-manpage-update-mount.cifs-manpage-with-info-about-rd.patch
  * remove 0004-checkopts-add-python-script-to-cross-check-mount-opt.patch
  * remove 0005-mount.cifs.rst-document-missing-options-correct-wron.patch
  * remove 0006-cifs-utils-support-rst2man-3.patch
  * remove 0007-checkopts-report-duplicated-options-in-man-page.patch
  * remove 0008-mount.cifs.rst-more-cleanups.patch
  * remove 0009-mount.cifs.rst-document-vers-3-mount-option.patch
  * remove 0010-mount.cifs.rst-document-vers-3.02-mount-option.patch
  * remove allow-dns-resolver-key-to-expire.patch
  * remove suse-document-new-vers-default-SMB2.1.patch
- Remove dependency workaround regarding python2/python3</changelog>
  <changelog author="aaptel@suse.com" date="1568030400">- Fix double-free in mount.cifs; (bsc#1149164).
  * add 0011-fix-doublefree.patch</changelog>
  <changelog author="palcantara@suse.de" date="1570017600">- Fix invalid free in mount.cifs; (bsc#1152930).
  * add 0012-mount.cifs-Fix-invalid-free.patch</changelog>
  <changelog author="aaptel@suse.com" date="1586347200">- rst2man has been moved to python3-docutils in SLE12+, update
  BuildRequires check to reflect that</changelog>
  <changelog author="aaptel@suse.com" date="1597060800">- CVE-2020-14342: Shell command injection vulnerability in mount.cifs;
  (bsc#1174477); (bso#14442); CVE-2020-14342.
  * add 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch</changelog>
  <changelog author="aaptel@suse.com" date="1597147200">- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="aaptel@suse.com" date="1607688000">- Update to cifs-utils 6.11
  * remove cifs-utils-6.9.tar.bz2
  * remove cifs-utils-6.9.tar.bz2.asc
  * add    cifs-utils-6.11.tar.bz2
  * add    cifs-utils-6.11.tar.bz2.asc
- Remove backports already in 6.11
  * remove 0001-smbinfo-Improve-help-usage-and-add-h-option.patch
  * remove 0002-smbinfo-Add-bash-completion-support-for-smbinfo.patch
  * remove 0003-getcifsacl-Add-support-to-accept-more-paths.patch
  * remove 0004-getcifsacl-Fix-usage-message-to-include-multiple-fil.patch
  * remove 0005-smbinfo-add-GETCOMPRESSION-support.patch
  * remove 0006-getcifsacl-Add-support-for-R-recursive-option.patch
  * remove 0007-smbinfo-add-bash-completion-support-for-getcompressi.patch
  * remove 0008-mount.cifs.c-fix-memory-leaks-in-main-func.patch
  * remove 0009-Zero-fill-the-allocated-memory-for-new-struct-cifs_n.patch
  * remove 0010-Zero-fill-the-allocated-memory-for-a-new-ACE.patch
  * remove 0011-fix-doublefree.patch
  * remove 0012-mount.cifs-Fix-invalid-free.patch
  * remove 0013-CVE-2020-14342-mount.cifs-fix-shell-command-injectio.patch
- Add fixes for autoconf and make install issues
  * add    fix-sbin-install-error.patch
  * add    0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * add    0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Hardcode python3 interpreter in shebang of smb2-quota instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="lnussel@suse.de" date="1610625600">- use new %_pamdir macro to avoid hardcoding pam module path</changelog>
  <changelog author="aaptel@suse.com" date="1614081600">- Update to cifs-utils 6.12
  * remove cifs-utils-6.11.tar.bz2
  * remove cifs-utils-6.11.tar.bz2.asc
  * add    cifs-utils-6.12.tar.bz2
  * add    cifs-utils-6.12.tar.bz2.asc
- Remove backports already in 6.12
  * remove 0001-cifs-utils-Respect-DESTDIR-when-installing-smb3-stuf.patch
  * remove 0002-cifs-utils-fix-probabilistic-compiling-error.patch
- Refresh Makefile.am install fix
  * modify fix-sbin-install-error.patch
- Hardcode python3 interpreter in shebang of smbinfo instead of
  /usr/bin/env to let rpm runtime dependency detect it.</changelog>
  <changelog author="palcantara@suse.de" date="1615291200">- CVE-2021-20208: cifs-utils: cifs.upcall kerberos auth leak in
  container; (bsc#1183239); CVE-2021-20208.
  * add 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="aaptel@suse.com" date="1619179200">- cifs.upcall: fix regression in kerberos mount; (bsc#1184815).
  * add 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to cifs-utils 6.13
  * Fixes CVE-2021-20208, cifs.upcall kerberos auth leak in container
  * remove cifs-utils-6.12.tar.bz2
  * remove cifs-utils-6.12.tar.bz2.asc
  * add    cifs-utils-6.13.tar.bz2
  * add    cifs-utils-6.13.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-try-to-use-container-ipc-uts-net-pid-mnt.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420800">- Update to cifs-utils 6.14
  * smbinfo is enhanced with capability to display alternate data streams
  * setcifsacl is improved to optionally reorder ACEs in preferred order
  * cifs.upcall regression in kerberos mount is fixed
  * remove cifs-utils-6.13.tar.bz2
  * remove cifs-utils-6.13.tar.bz2.asc
  * add    cifs-utils-6.14.tar.bz2
  * add    cifs-utils-6.14.tar.bz2.asc
- Drop upstream fixed patches:
  * 0001-cifs.upcall-fix-regression-in-kerberos-mount.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1642420801">- Update cifs-utils.spec:
  * Remove unused
    !BuildIgnore: samba-client
    BuildRequires: libwbclient-devel</changelog>
  <changelog author="rpm@fthiessen.de" date="1652788800">- Update to version 6.15
  * CVE-2022-27239: mount.cifs: fix length check for ip option parsing
    Previous check was true whatever the length of the input string was,
    leading to a buffer overflow in the subsequent strcpy call (bsc#1197216).
  * mount.cifs: fix verbose messages on option parsing (bsc#1198976, CVE-2022-29869)</changelog>
</package>
<package pkgid="5967da22f72b431701712fa0e24eab0f2ac0388677fa468a8c2b2afe7012227e" name="ckermit" arch="aarch64">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="35d9ca69a840a2539260d37ee907b29100c9a6e2cbc8ea97788f6f2971a093d9" name="ckermit" arch="ppc64le">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="10ccaedf8630310e465b48381faf360e4265c8958c3ac936c1b9c86a5ceaef1e" name="ckermit" arch="s390x">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="a1c17155783b8b2117a66139633b99ac2d915ae1c2d030bc86d6bbb9d715e155" name="ckermit" arch="src">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="rguenther@suse.de" date="1175256000">- add ncurses-devel BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1196856000">- move /etc/skel/.kermrc to this package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1255953600">- build version 8.0.212 pre version</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1264593600">- Build version 9.0.299 Alpha.01</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1266062400">- Build version 9.0.299 Alpha.02</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1272196800">- Build version 9.0.299 Alpha.06</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1280059200">- added a lockdev patch</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1282651200">- build version 9.0.299 Alpha.08</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1287316800">- build version 9.0.299 Alpha.09</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1304510400">- put pre 9.0 version in contrib</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="da905573432c7931dc67b3e49a7c3293e5ca9442856e807f20e4aed21fdae650" name="ckermit" arch="x86_64">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="ae2dde7072a2d32189a8e8305962e13abb760b3a7a52426ff63c42b7984f60f2" name="ckermit-doc" arch="noarch">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="291bb7ba5a7e17bc689fb6803e3caeca12d4ff3f7080f8cb997360006b5ae2c8" name="clamav" arch="aarch64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="d45b69b5b20a3a32521e09fe207553ca271e26a5a3005e0a27c7313b08552549" name="clamav" arch="ppc64le">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="0f67c440c098cf186e0c4eb2183aba7f7ded481242c7aac5b769abf5a0ff41cc" name="clamav" arch="s390x">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="bcd3ba6c9c24fe28c8f048d0316ab25c4218d9a3bea7421204fc9370592b2113" name="clamav" arch="src">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="8fbbfe80e60cd4df178d06431066af25ffe76aaab88bee193de054de12ce14b9" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="8970cc53045c78b5319fc58b68ae285cf5e1fb74a817deef684171b175923d67" name="clamav" arch="aarch64">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="ea6b5f49f3af34d9a33dba94ed204148b7e9e8ca80ef3d190657e9336e4d251e" name="clamav" arch="ppc64le">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="eeb67bdda254380fe8d9e5499c02c65ff9cae849ecad5762cab069c0cc9f87f5" name="clamav" arch="s390x">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="928f801407dfc904658724353a1825a2e4aae48743b67871971692c56f24e4e5" name="clamav" arch="src">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="d2449e540f5b857508bfd53bf5495d29535aed4de7e24302c9b40f5a6e427ce6" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="40eb3b22da4de1f8ec61854fb553d10f7150181dc62654a8f8d2877674bd1e96" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="40ad882a852031a188ce498b0bab8e4ba273588a47bd6d07eca723341a96a5b0" name="clamav-devel" arch="ppc64le">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="98125e88e67321648b7bbdc2da60f6d645d2f8cbe3570dba8a56e3b93468a79a" name="clamav-devel" arch="s390x">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="9779f79d44919af7c0a3c48545d818833ddaf21f5239426731f3ee5a606f32ed" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="5768402fa52a980e00227ecedb8b09e0ed53e0c04a133809f7b038c7c372976e" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="5c9f2a06ee5da34024b0274fd6cccfc14e53a7b1705a89b16b04b3d2d2e5dee7" name="clamav-devel" arch="ppc64le">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="bb8324b2a8c5b62295fb30244977a4c9a8c02728d6ae0d8cf722913cb5c6f5bd" name="clamav-devel" arch="s390x">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="97d352ce71ba8f07f7d4b3224a71ae5e4ee006146040055a264ba8939aac0b26" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.7" rel="150000.3.41.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1661947200">- bsc#1202986: Update to 0.103.7:
  * Upgrade the vendored UnRAR library to version 6.1.7.
  * Fix logical signature "Intermediates" feature.
  * Relax constraints on slightly malformed zip archives that
    contain overlapping file entries.</changelog>
</package>
<package pkgid="e2aaadf67f6914d61008ad3cae908f9b378285eb82efadfc62bdb0ce2457f356" name="clamsap" arch="aarch64">
  <version epoch="0" ver="0.104.2" rel="150000.4.6.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
</package>
<package pkgid="4a303d2d0346c5475f4d808c83ff12da1241a7bdc9c39cf037fd13cb557eaab0" name="clamsap" arch="ppc64le">
  <version epoch="0" ver="0.104.2" rel="150000.4.6.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
</package>
<package pkgid="4eceb4c16cf0432c055f5a5c7b59872217daf763676f3623bccda011cd267517" name="clamsap" arch="s390x">
  <version epoch="0" ver="0.104.2" rel="150000.4.6.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
</package>
<package pkgid="32000fea307cc32887edd8d93bcd676e0cdf2505b145bb7085395a07d9fe235a" name="clamsap" arch="src">
  <version epoch="0" ver="0.104.2" rel="150000.4.6.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
</package>
<package pkgid="02842e7d9d75315e0f2786c1feb2a995ff4e35996fbe06768cc2c8b157c2487b" name="clamsap" arch="x86_64">
  <version epoch="0" ver="0.104.2" rel="150000.4.6.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
</package>
<package pkgid="725d21815643c401d2a771247c7d497b74e34fbd882f160e3a7ee4658457be90" name="clamsap" arch="aarch64">
  <version epoch="0" ver="0.104.3" rel="150000.4.12.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- (bsc#1200699) L3: clamsap threat XML file like a virus
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="75300ff5b38336cb11a7abdefdd74b9fc95061ca6b9ac98383eebe57356fdb5e" name="clamsap" arch="ppc64le">
  <version epoch="0" ver="0.104.3" rel="150000.4.12.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- (bsc#1200699) L3: clamsap threat XML file like a virus
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="7fce9329af1fd38abeeb1436777bc1132bfeecb091a79bff276f514ade241e19" name="clamsap" arch="s390x">
  <version epoch="0" ver="0.104.3" rel="150000.4.12.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- (bsc#1200699) L3: clamsap threat XML file like a virus
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="ac872f6f7a3ce345e736ae2e176632c5953582bbc850b9173b76b45da16f6086" name="clamsap" arch="src">
  <version epoch="0" ver="0.104.3" rel="150000.4.12.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- (bsc#1200699) L3: clamsap threat XML file like a virus
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="2c294d6530d23f4765e5a61c43909f0e2119f55768d29eb24cc365fc40725593" name="clamsap" arch="x86_64">
  <version epoch="0" ver="0.104.3" rel="150000.4.12.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- (bsc#1200699) L3: clamsap threat XML file like a virus
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="51fcd9daae2e47cf6b8a813f718cae900799699999a89ee46af6d5ce20ac09a0" name="clamsap" arch="aarch64">
  <version epoch="0" ver="0.104.3" rel="150000.4.9.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="d87bd23c44939da1eb4c231aec7419ddad4c5cb266ec2b223829c5e4a6b1be17" name="clamsap" arch="ppc64le">
  <version epoch="0" ver="0.104.3" rel="150000.4.9.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="618913164d66c4d0f1332adddb594f35ff5d7d296d520c1a81d3d6088cda2859" name="clamsap" arch="s390x">
  <version epoch="0" ver="0.104.3" rel="150000.4.9.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="0162873c02972fef73051aa307704142cbecffcf137d7fff920e9e1f1deef26b" name="clamsap" arch="src">
  <version epoch="0" ver="0.104.3" rel="150000.4.9.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="e8a56ee1359f0319cfc916e1a739d10eeef39bd15be7598287e95c1db0c42528" name="clamsap" arch="x86_64">
  <version epoch="0" ver="0.104.3" rel="150000.4.9.1"/>
  <changelog author="max@suse.com" date="1330948800">- Copy package from the security project in OBS.
- Cleanup spec file
- Add clamsap-mktime.patch to remove a known broken autoconf test.</changelog>
  <changelog author="varkoly@suse.com" date="1423656000">- Update to Version 0.9.7.4
- Remove patch clamsap-mktime.patch</changelog>
  <changelog author="varkoly@suse.com" date="1451304000">- Update to Version 0.98.9
- Improve MIME check
- Fix SAP archive decompression
- Enhance error messages in case of initialisation errors.
- Create default sym.link for libclamdsap
- Fix problem, if libmagic can not be found in VsaStartup
- Security fix for compression, see CVE-2015-2282 and CVE-2015-2278
- Enhance buffer scan in libclamdsap
- Support of NW-VSI 2.00
  This includes the support of MIME type detection in addition to AV.
  Use code from SAP example adapter to provide SAP archive format scan.
  see http://scn.sap.com/docs/DOC-7838</changelog>
  <changelog author="varkoly@suse.com" date="1490443200">- Update to Version 0.99.25
  * Add Office Mime Detected, to be independent from libmagic
  * Fix compare of block extension, soves https://sourceforge.net/p/clamsap/bugs/2/
  * Check for SAR extract</changelog>
  <changelog author="varkoly@suse.com" date="1493812800">- FATE#322612 Document setup and usage of clamsap</changelog>
  <changelog author="varkoly@suse.com" date="1515672000">- bsc#1074649 clamsap build fail
  Add missed package (clamav-devel) to spec.</changelog>
  <changelog author="varkoly@suse.com" date="1614859200">- Update dokumentation
  (bsc#1181586) SLES15 SP2: ClamAV/ClamSAP allocates 1GB of anon
  memory segment for each SAP worker process
- JIRA-TEAM-3439 Backport clamsap from openSUSE:security to SLES
- Update to version 0.101.9
  * enhance jpeg detection
  * fix mime type check for html
  * use short MIME types always
  * use IANA type for SAR, see https://www.iana.org/assignments/media-types/media-types.xhtml
  * copyright update
  * correct application/octet-stream
  * prevent overflow
  * Use libmagic for buffer scan
  * Fix interface change from clamav 0.101.0
  * Fix parser of SAR files
  * Fix MIME detection for TEXT files
  * fix MIME type detection for multi byte
  * improve load of libclamav on linux
- Adapt automake version:
  adapt-automake-version.pach</changelog>
  <changelog author="varkoly@suse.com" date="1658750400">- Update to version 0.104
  (jsc#PED-805) Update clamsap to current version - and update regularly
  * Relax javascript check in PDF
  * use https source url, also https URL
  * Wildcard support for MIME type lists
  * Fix SAR file content scan
  * Add option for PDF active content
  * Remove own default settings from VsaGetConfig and rely on clamav defaults
  * Change default virusname in case clamav does not return any virus name.
  * Limit pcre calls
  * Increase Version because tested with latest clam engine
  * Support new parameter SCANHEURISTICLEVEL</changelog>
  <changelog author="varkoly@suse.com" date="1660219200">- Fix XML MIME type detection using libmagic
- 0.104.3 (jsc#PED-805)</changelog>
</package>
<package pkgid="c1b1190f345367a5ea904ee7cd6fea0291f61cf63fe2373e4404e13bf1267758" name="clang-tools" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="fb74b164e56f66f458e34ac56f15fa2a6ff679690a40c156aa7a2b04cc487438" name="clang-tools" arch="ppc64le">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="3542f06d4fe84a6c0f72639c850b5052b2f4938dbc18fbdf32d3a506586c2bc4" name="clang-tools" arch="s390x">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="280a8bdd65b59b340b06ae4a60ed81f379f3498a635fea2054ead4556b60cabb" name="clang-tools" arch="x86_64">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="b4d70eddf76d3d6a0a2512b9037c292bf60c91bebe2d9f3f60191acf0ff3e0f1" name="clang-tools" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="122a39f5eed38aa0ec9304b2e4656d971cdb0c0b649232f0a284e9415d4946ee" name="clang-tools" arch="ppc64le">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="844e7f9be89559a63ff9d27649dcad73fa78f459f80e620c10e5c77f05c99dc2" name="clang-tools" arch="s390x">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="eb66ccb9f4cbc3c7dca39a9cb7767a65101891d4fecb4a80dc5ec6a99ca60e20" name="clang-tools" arch="x86_64">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="80af8722fd6cea8d806ed891be4e81c0c22dc8d42b79eda59e31250359596f7e" name="clang11" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="b6b0a102ebb5acc0d8abf74784dd2612a2a1bbd28f3c1897789adf3e828fdb20" name="clang11" arch="ppc64le">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="b7ee6ad757a1bb79cd44227e2f2cf198ccd46b821e0bb8e522d0d3753898af0f" name="clang11" arch="s390x">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="0e947540fcda08460196e01e96f75e5836330e85e3489b54ab2751b71a797d76" name="clang11" arch="x86_64">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="8eb2cffdd9a0995c48aef1027d72ca6049c15c31ed54326ef1720fd29b984bd9" name="clang11" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="ba42fe00ebeae58ba9ee25e4b71cfd43191cb8bf0efc177c11b65d01f4c80b0e" name="clang11" arch="ppc64le">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="d0dd656d47c46c5c15cb7acfa0c4fdd0f717cb2b2f068f755d288f685ba2de3c" name="clang11" arch="s390x">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="48eccc73dd03e870d619c63d42e96595aa87dc45caf84486b740ac466a308248" name="clang11" arch="x86_64">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="220dc9b28bb73facc3cd38bc4c43fb39b60eca36c17f787e839897f88ddc6a81" name="clang11-devel" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="2e36e12836a85fe56975d4b95c5edb8f1ca3156d1d00c828da63becfb553cb75" name="clang11-devel" arch="ppc64le">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="0eac6b3b7225e5158077302ae0afce013e93b4a4ce9d2bca519229994a3d86f6" name="clang11-devel" arch="s390x">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="07cd24b0947ca597d5a46fcf8bfbb658e7878bd6137771762d85a81f208b3135" name="clang11-devel" arch="x86_64">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="ed5bfa3d7dd398a80f9aa85778604bd2f903b60ea4fb8009de5f5cc13ccabafe" name="clang11-devel" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="bfebd7553df4ff6fb6ffbf365ea2d05e4cb0ed007087b93e0b430a07f9e047c1" name="clang11-devel" arch="ppc64le">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="cbd4550e6c0cedfa5baafcde385b12cdaf5688cc3612d3d33a9bc9785caf532e" name="clang11-devel" arch="s390x">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="f8bfc302251c8f46aed5f2dd391072b242f63ecf6ab267baa7f38549ac18583f" name="clang11-devel" arch="x86_64">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="02d813b97a4a6cb3ebe85d65ebf08c6a211aefe630fbd8de7a7f77c527c60de2" name="clang11-devel-32bit" arch="x86_64">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="ad8a34505899406c6b82bccbcb6c6e9feb93b0c88e5df5f1f0015166d9c8bf35" name="clang11-devel-32bit" arch="x86_64">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="1cd021014410a8690e14a5c1f17353956e41769c0aeeb487ebea17c72dfbc516" name="clang11-doc" arch="noarch">
  <version epoch="0" ver="11.0.1" rel="150300.3.3.1"/>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
</package>
<package pkgid="ee0fca3c82de33a1b0ec760353a749daa3eb7743676108cd6d45303170c40c2f" name="clang11-doc" arch="noarch">
  <version epoch="0" ver="11.0.1" rel="150300.3.6.1"/>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583582400">- Move all clang-related scripts (including those originally in
  clangX-checker), hmaptool and clang-doc into a common
  unversioned subpackage clang-tools, like python3-clang.
  The scripts reference the unversioned executables, so allowing
  multiple versions via update-alternatives would be misleading.
  The clang-doc executable will come with assets in Clang 10, so
  we have to take it out of update-alternatives as well.
  This should be the proper solution to boo#1161873.
- Include run-find-all-symbols script in clang-tools.
- Remove metadata for clangX-include-fixer subpackage that never
  had any files and thus wasn't released as rpm. There are so many
  clang binaries that packaging them separately doesn't scale.
- Fix lldb version string, adapt lldb-cmake.patch (boo#1165517).
- Remove unneccesary libtool dependency.
- Don't let clang depend on libc++, we link it with libstdc++.
- Recommend gold plugin if clang and gold are installed.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1583928000">- Require clang-tools for clangX-devel.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1584964800">- Remove conflicts of clang-tools with {clang,llvm}{7,8}: the
  relevant binaries have been removed from those packages. This
  allows having clang-tools together with older versions of llvm.
  For a smooth installation we add OrderWithRequires dependencies.
- Fix typos in (still inactive) !%{with clang_scripts} part.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1585051200">- Update to version 10.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/10.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/10.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-ifs, llvm-install-name-tool, llvm-reduce.
  * New Clang tools: clang-move, clang-offload-wrapper, pp-trace.
  * lldb-mi moved to a separate project and is no longer available.
- Dropped obsolete patches:
  * clang-fix-powerpc-triplet.patch
  * clang-riscv64-rv64gc.diff
  * compiler-rt-move-fdp.patch
  * compiler-rt-sanitizer-ipc-perm.patch
  * D60657-riscv-pcrel_lo.diff
  * gwp-asan-lto.patch
  * libcxx-tests-linux-distribution.patch
  * link-lldb-shared.patch
  * llvm-riscv64-fix-cffi.diff
  * openmp-export-fini.patch
  * riscv-eh-frame-fixup.patch
  * riscv64-suse-linux.patch
- Rebased patches:
  * assume-opensuse.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm_build_tablegen_component_as_shared_library.patch
  * llvm-do-not-install-static-libraries.patch
  * llvm-remove-clang-only-flags.patch
  * lto-disable-cache.patch
  * polly-pthread.patch
  * tests-use-python3.patch
- Add tablegen-test-link-static.patch: fix TableGenTests.
- Add ValueLattice-Add-new-state-for-undef-constants.patch: fix
  miscompilation on ppc64/s390x that was leading to test crashes.
- Enable ThinLTO on aarch64.
- Disable ThinLTO on ppc64le due to internal error in gold.
- Delete object files and static libraries from build tree in
  %install already, because debuginfo extraction happens after
  that. If we do it after %check, we run out of disk space.
- Run tests "manually", because we've already removed many targets.
- Don't build unit tests, because some of them are now statically
  linked, which is very expensive with LTO. Also unit tests are
  probably not very interesting on the distribution level, we don't
  expect them to perform different than in upstream. The relevant
  upstream change for this is https://reviews.llvm.org/D54439.
- Drop %if for openSUSE 13.2.</changelog>
  <changelog author="idonmez@suse.com" date="1592913600">- Add lld-default-sha1.patch to make lld generate SHA1 build-ids by
  default, otherwise our tools cannot process the debuginfo.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1594555200">- Factor out computation of the number of jobs into a macro.
- Choose mem_per_compile_job dependent on build stage, let stage 1
  on x86_64 use more memory.
- More generous memory allocation on riscv64.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1595419200">- Update to version 10.0.1.
  * This release contains bug-fixes for the LLVM 10.0.0 release.
    This release is API and ABI compatible with 10.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Replace ValueLattice-Add-new-state-for-undef-constants.patch,
  which landed upstream in a modified version, by
  restore-llvm10-abi.patch that resets the ABI to our 10.0.0.
- Rewrite lld-default-sha1.patch to be version-independent.
- Set flags consistently, so that we don't lose -DNDEBUG on 32-bit
  architectures. Also we don't need the opt flags twice. This leads
  to a significant reduction in binary sizes on 32-bit arches.
- Make it easier to package release candidates.
- Enable most tests on 32-bit ARM, but not for libcxx.
- Add fix-atomics-test.patch for architectures where native atomics
  are not available.
- Lower build constraints for riscv64 a bit to allow building on
  more workers.
- Allow more compile jobs in stage 2.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1596110400">- Add ld.lld as an alternative for ld. (boo#1174656)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603108800">- Update to version 11.0.0.
  * For details, see the release notes:
  - https://releases.llvm.org/11.0.0/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/projects/libcxx/docs/ReleaseNotes.html
  - https://releases.llvm.org/11.0.0/tools/lld/docs/ReleaseNotes.html
  * New LLVM tools: llvm-gsymutil, llvm-ml.
  * clang-import-test was removed.
- Drop obsolete patches:
  * clang-ignore-stack-clash-protector.patch
  * fix-atomics-test.patch
  * restore-llvm10-abi.patch
- Rebase patches:
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * link-clang-shared.patch
  * link-clang-tools-extra-shared.patch
  * lldb-cmake.patch
  * llvm-do-not-install-static-libraries.patch
  * lto-disable-cache.patch
- Add llvm-exegesis-link-dylib.patch: link llvm-exegesis with
  libLLVM.so, the advanced functionality is not available anyway.
- Remove -fstack-clash-protection on architectures where it isn't
  actually supported, because that prevents feature detection.
- Make sure we also build AttributeReference for the documentation.
  This requires building via CMake. Also shorten the paths.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1603540800">- Disable ThinLTO on aarch64 because of hangs. (boo#1178070)
- Enable ThinLTO on ppc64 and ppc64le, the internal error is gone.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1605355200">- Let CMake files in {llvm,clang}X-devel refer to the versioned
  binaries that come with the package instead of the symlink
  managed by update-alternatives. (boo#1178513)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1606132800">- Add compiler-rt-dont-compile-assembly-files-as-c.patch to fix
  build failure with newer CMake versions.</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- polly-pthread.patch: Remove, std::call_once no longer needs libpthread</changelog>
  <changelog author="gmbr3@opensuse.org" date="1609502400">- Move BFD plugins to %{_libdir}</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1609934400">- Increase required RAM for aarch64</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1610193600">- Update to version 11.0.1.
  * This release contains bug-fixes for the LLVM 11.0.0 release.
    This release is API and ABI compatible with 11.0.0.
- Rebase llvm-do-not-install-static-libraries.patch.
- Drop obsolete compiler-rt-dont-compile-assembly-files-as-c.patch.
- Make documentation tarballs more reproducible.</changelog>
  <changelog author="rguenther@suse.com" date="1664280000">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues.  [bsc#1189602]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1669809600">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197773 , backported from OBS devel revision 25]
- Propagate the complete host environment to the tests run. This
  ensures that all envvars needed e.g. for the compiler to work
  correctly are present. This run libc++ tests successfully getting the env
  LD_LIBRARY_PATH, otherwise, library were not found.
  [llvm-propagate-host-env-to-libc++-test-suite.patch]</changelog>
</package>
<package pkgid="ec1d104f877c6a22ecb72e684c8719fe81caade8493f39212158ec08ea4c3381" name="clang7" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="acf37b8f40ced1bc676cf7d7c0fae6f4aff90956677e09dc7fc24bf0ae36b899" name="clang7" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="4ec6fe96a375e610614c02de1ce8d31c0e20513f58f4adb072dc575f65a4a0e3" name="clang7" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="ba4801490dcc2c8a511ce557ca503b40ed35aa29c117b9edd397c3cf17e078cf" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="94aa764c9b97cb065a22d4863a068a272d026698ae62ae364051bf0b9b896422" name="clang7-checker" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="a57914e2a72cb2772edb9c0da48b413668258f50288f6589fa1c967f61e367d3" name="clang7-checker" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="2ea4acae4673f0149095eac7d94a58e3899e405003718a4bfb871e493cf4f38c" name="clang7-checker" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="8fe8e467927f762fe67878c35f22dd4b4c787c0378597695fd0a9b867906de61" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="cbb72d361c644ebacaae0c6fd41acd5c192c3866a41ece670a4f3de99af895b9" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="191d925e17b517351bb3bc5f9a94598f7a0520294d516c6986d9a2ac3196cdab" name="clang7-devel" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="c6bca863a4420a905cbb32acf7545ace11244bce8b7286913e5b0ea839148c75" name="clang7-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="6f139f9f173c1023722228f0220dc6ac73fbac4173295b4f455cbd17dd18f0f3" name="clang7-devel" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="4cb8bb056d2bbe95e8d954d4351ed556be323ad70dc2ffef3672324c64f32ba6" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="5a41e6c96672115bc0cd8d91cc991d2f929ebeabda72bb05919ff5dcf89d0909" name="clang9" arch="aarch64">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="07b89cd72fa3a896ca89a7764f9428b93f7df44a2f393cc1fed04059bcc648d1" name="clang9" arch="ppc64le">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="0f33d68cbefbb0f40e5021bab88d5379fda17c678f8a2d7547ff150715d3cd21" name="clang9" arch="s390x">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="97c59879633ef05ffc4443c8cddde123c121c6d2014894cf966b25009c36c96e" name="clang9" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="6bcd53eddde45a9d049e245a78b6236e281b99b187e41d3af2f6d432f967c423" name="clang9-checker" arch="aarch64">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="eaa610404ef29b716818002be5db779cc52bb0f5595bfd0c9fd83568d7f420f3" name="clang9-checker" arch="ppc64le">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="ee0c5ebb7b201ff2ed0bb0ba59352b0500f3c5cdfb68d1bc5268163a63c53944" name="clang9-checker" arch="s390x">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="564bddc42a66a704f9903ab52998e57e64292fcf414d7e293a2f0b34f5c04493" name="clang9-checker" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="858a68cf89ca55533d7b1be213445af43a74809eeb5d1a6a3c74d79a1ddab6de" name="clang9-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="f26f76930f4364885f78a79732e1e6bd2a561675c698bfe18e6b8836bea8b8fd" name="clang9-devel" arch="aarch64">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="e20ebacdb2412ca06e8d61d4982561898dd4927c05fdd8db03e61362a6b41a6a" name="clang9-devel" arch="ppc64le">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="b8bea3682252e990f6d0746f83a6d52c34fb42622b56a07542a139e6bfd86508" name="clang9-devel" arch="s390x">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="6619ec2e3929287f4af042b25226f16e0deec61cc32a679c4d43bb164f163356" name="clang9-devel" arch="x86_64">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="e72b29ac809a9ddccbe2380a0bbbf3da93b31d339eebb715ae50c5d98118dd80" name="clang9-doc" arch="noarch">
  <version epoch="0" ver="9.0.1" rel="150200.3.6.1"/>
  <changelog author="fvogt@suse.com" date="1572436800">- Fix typo, BOLL -&gt; BOOL</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1572868800">- Add openmp-export-fini.patch: Export termination function for
  libomp.so, solves boo#1155108.
- Remove flaky test case in libcxx.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575374400">- Add gwp-asan-lto.patch: Make sure there are no LLVM IR files in
  static libraries that we package.
- Add libcxx-tests-linux-distribution.patch (boo#1158293):
  Replace platform.linux_distribution by distro.linux_distribution.
- Make documentation packages noarch.</changelog>
  <changelog author="mliska@suse.cz" date="1575547200">- Add llvm-add-missing-include.patch in order to fix
  boo#1158367.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1575547201">- Modify libcxx-tests-linux-distribution.patch to remove dependency
  on python-distro again: we don't have expected failures.</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1576843200">- Update to version 9.0.1.
  * This release contains bug-fixes for the LLVM 9.0.0 release.
    This release is API and ABI compatible with 9.0.0.
- Drop patches that have landed upstream:
  * dont-install-example-analyzer-plugins.patch
  * fix-module-test.patch
  * llvm-add-missing-include.patch
- Drop set-revision.patch, don't provide revision number in clang.
  The upstream repository has moved from Subversion to git, so the
  revision number is just a hash, which limits its usefulness.
- Rebase llvm-do-not-install-static-libraries.patch.</changelog>
  <changelog author="schwab@suse.de" date="1578052800">- Enable support for riscv64
- clang-riscv64-rv64gc.diff, riscv64-suse-linux.patch,
  llvm-riscv64-fix-cffi.diff, D60657-riscv-pcrel_lo.diff: Backports from
  master</changelog>
  <changelog author="schwab@suse.de" date="1578312000">- riscv-eh-frame-fixup.patch: Fix handling of .eh_frame on RISC-V
- polly-pthread.patch: Add missing -lpthread</changelog>
  <changelog author="jcaamano@suse.com" date="1578484800">- Add upstream patch to export compiler-rt FuzzedDataProvider header,
  required by Envoy 1.12.2:
  * compiler-rt-move-fdp.patch</changelog>
  <changelog author="schwab@suse.de" date="1578744000">- riscv-eh-frame-fixup.patch: Remove changesets that alter the libLLVM ABI</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1579089600">- Undo spec-cleaner changes that we don't want.
  * Reintroduce blank lines in configuration.
  * Use packageand syntax that works for older versions of RPM.
  * Don't use %{_bindir} on left-hand side of sed replacements.</changelog>
  <changelog author="rguenther@suse.com" date="1580126400">- Add polly and lld build conditionals, remove excessive Requires
  to clang from docs.  Fix conditional for libc++ use.
  [jsc#SLE-7400, jsc#SLE-7614, jsc#SLE-7452, jsc#SLE-8920, jsc#SLE-7390,
  jsc#SLE-7587]</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1580299200">- Move clang-{format,include-fixer,rename}.{el,py} files from
  llvm-*-plugins to clang package. (boo#1161873)
- Drop the now empty llvm-emacs-plugins package.</changelog>
  <changelog author="schwab@suse.de" date="1580731200">- Add compiler-rt-sanitizer-ipc-perm.patch: Fix sanitizer-common
  build with glibc 2.31.</changelog>
  <changelog author="rguenther@suse.com" date="1580817600">- Add clang5-devel to clang9-doc conflicts.</changelog>
  <changelog author="rguenther@suse.com" date="1580990400">- Add back emacs-llvm Provides and Conflicts to clang subpackage
  originally in llvm-emacs-plugins to properly conflict with
  llvm-emacs-plugins from older llvm releases.</changelog>
  <changelog author="rguenther@suse.com" date="1581076800">- Add vim-plugin-llvm Conflicts to clang subpackage which now
  contains files formerly in llvmN-vim-plugins, conflicting with
  packages from older llvm releases.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592827200">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1667822400">- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
  [bsc#1197776 , backported from OBS devel revision 69]
- Add [configure-policy-cmp0116.patch]
  * fix cmake warning for cmake at version &gt; 3.20</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1668513600">- Add llvm-testsuite-keep-DFLTCC.patch to keep DFLTCC environment
  during testing so we can disable the compression facility on
  s390x which causes testsuite issues. [bsc#1189602]</changelog>
</package>
<package pkgid="51d1fd63f9c26c22609b205bd23eb09d1f98b9b1c452c3145e0f7d6460a823a7" name="clone-master-clean-up" arch="noarch">
  <version epoch="0" ver="1.10" rel="150100.3.17.1"/>
  <changelog author="hguo@suse.com" date="1442232000">- Initial version, initial release.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Add clean up item: auto-generated HANA firewall script.</changelog>
  <changelog author="varkoly@suse.com" date="1449748800">- according to comment from Berthold Gunreben in comment #18 in
- FATE#318965 Allow Clone-Master creation, the random-seed files
- need to be deleted, too</changelog>
  <changelog author="hguo@suse.com" date="1452859200">- The following issues are addressed:
  * After wiping swap, the swap gets a new UUID, causing slow boot.
  * 70-persistent-net.rules is not removed.
  Along with several coding style and indentation fixes.
  (bsc#961906)</changelog>
  <changelog author="abriel@suse.com" date="1494849600">- The following changes are made to accomplish FATE#322066
  * remove some more files and directories (see man page for detailes)
  * add clone-master-clean-up.sysconfig, to give the user the possibillity for minimal intervention
  * add custom_remove.template to allow partner or customer specific removals</changelog>
  <changelog author="abriel@suse.com" date="1499342400">- The following changes are made to accomplish FATE#322066
  * Fix typos and improve man page</changelog>
  <changelog author="ro@suse.de" date="1517486400">- Prepare for new fillup location</changelog>
  <changelog author="dakechi@suse.com" date="1548849600">- Moved the configuration files out of the /var directory
  * Needed for compliance with transactional updates (bsc#1092378)</changelog>
  <changelog author="eich@suse.com" date="1564660800">- Wicked stores a number of files containing unique IDs and DHCP data
  in /var/lib/wicked/*. These files need to be removed for cloning:
  if machines with identical settings exist in the same network
  multiple times, IP addresses may change with each renewal
  (bsc#1139667)</changelog>
  <changelog author="eich@suse.com" date="1564747200">- Add _service file to fetch package form git.
  Add workaround for service osc_scm: avoid script to have the
  same name repository.</changelog>
  <changelog author="eich@suse.com" date="1565179200">- Install README.md and license file, fix build warnings.
- Fix _service-file:
  * Replace 'HEAD' version by 'master' branch:
    Right now, this project has just one single branch - track
    this as the release branch.
  * Add &lt;versionformat&gt;.</changelog>
  <changelog author="jengelh@inai.de" date="1566907200">- Use noun phrase in descriptions.</changelog>
  <changelog author="abriel@suse.com" date="1570536000">- Bump version to 1.5
- Don't show output from pushd/popd
- Make snapper snapshot removal more generic
  The output format is not really meant for machine reading, it's
  format has changed thus the simple parser broke.
  This now makes the parser more generic (using data from d-bus),
  also now it is ensured the snapshots are deleted in the correct
  order.
  (bsc#1149322)</changelog>
  <changelog author="abriel@suse.com" date="1597233600">- Bump version to 1.6
- cleanup salt client ID and osad authentication configuration
  file and the system ID
  (bsc#1174147)
- change the path of the template file in the comments of
  custom_remove.template and clone-master-clean-up.sh
  (jsc#TEAM-490)</changelog>
  <changelog author="abriel@suse.com" date="1661860800">- Bump version to 1.7
- CVE-2021-32000: fix some potentially dangerous file system
  operations
  (bsc#1181050)</changelog>
  <changelog author="varkoly@suse.com" date="1663848000">- Bump version to 1.8
- clone-master-clean-up fails to remove btrfs snapshots
  (bsc#1203651)</changelog>
  <changelog author="varkoly@suse.com" date="1663934400">- Bump version to 1.9
- [clone-master-clean-up] Cleannup initiatorname.iscsi
  Remove all no comment files
  (bsc#1203024)</changelog>
  <changelog author="varkoly@suse.com" date="1666958400">- Bump version to 1.10
- clone-master-clean-up fails if postfix is not installed (bsc#1204835)
  Check if the directory does exists.</changelog>
</package>
<package pkgid="b3c47c06775ecf1425b0b11d5effb1d5ee89a58a5401272bc8ec3da226389175" name="clone-master-clean-up" arch="src">
  <version epoch="0" ver="1.10" rel="150100.3.17.1"/>
  <changelog author="hguo@suse.com" date="1442232000">- Initial version, initial release.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Add clean up item: auto-generated HANA firewall script.</changelog>
  <changelog author="varkoly@suse.com" date="1449748800">- according to comment from Berthold Gunreben in comment #18 in
- FATE#318965 Allow Clone-Master creation, the random-seed files
- need to be deleted, too</changelog>
  <changelog author="hguo@suse.com" date="1452859200">- The following issues are addressed:
  * After wiping swap, the swap gets a new UUID, causing slow boot.
  * 70-persistent-net.rules is not removed.
  Along with several coding style and indentation fixes.
  (bsc#961906)</changelog>
  <changelog author="abriel@suse.com" date="1494849600">- The following changes are made to accomplish FATE#322066
  * remove some more files and directories (see man page for detailes)
  * add clone-master-clean-up.sysconfig, to give the user the possibillity for minimal intervention
  * add custom_remove.template to allow partner or customer specific removals</changelog>
  <changelog author="abriel@suse.com" date="1499342400">- The following changes are made to accomplish FATE#322066
  * Fix typos and improve man page</changelog>
  <changelog author="ro@suse.de" date="1517486400">- Prepare for new fillup location</changelog>
  <changelog author="dakechi@suse.com" date="1548849600">- Moved the configuration files out of the /var directory
  * Needed for compliance with transactional updates (bsc#1092378)</changelog>
  <changelog author="eich@suse.com" date="1564660800">- Wicked stores a number of files containing unique IDs and DHCP data
  in /var/lib/wicked/*. These files need to be removed for cloning:
  if machines with identical settings exist in the same network
  multiple times, IP addresses may change with each renewal
  (bsc#1139667)</changelog>
  <changelog author="eich@suse.com" date="1564747200">- Add _service file to fetch package form git.
  Add workaround for service osc_scm: avoid script to have the
  same name repository.</changelog>
  <changelog author="eich@suse.com" date="1565179200">- Install README.md and license file, fix build warnings.
- Fix _service-file:
  * Replace 'HEAD' version by 'master' branch:
    Right now, this project has just one single branch - track
    this as the release branch.
  * Add &lt;versionformat&gt;.</changelog>
  <changelog author="jengelh@inai.de" date="1566907200">- Use noun phrase in descriptions.</changelog>
  <changelog author="abriel@suse.com" date="1570536000">- Bump version to 1.5
- Don't show output from pushd/popd
- Make snapper snapshot removal more generic
  The output format is not really meant for machine reading, it's
  format has changed thus the simple parser broke.
  This now makes the parser more generic (using data from d-bus),
  also now it is ensured the snapshots are deleted in the correct
  order.
  (bsc#1149322)</changelog>
  <changelog author="abriel@suse.com" date="1597233600">- Bump version to 1.6
- cleanup salt client ID and osad authentication configuration
  file and the system ID
  (bsc#1174147)
- change the path of the template file in the comments of
  custom_remove.template and clone-master-clean-up.sh
  (jsc#TEAM-490)</changelog>
  <changelog author="abriel@suse.com" date="1661860800">- Bump version to 1.7
- CVE-2021-32000: fix some potentially dangerous file system
  operations
  (bsc#1181050)</changelog>
  <changelog author="varkoly@suse.com" date="1663848000">- Bump version to 1.8
- clone-master-clean-up fails to remove btrfs snapshots
  (bsc#1203651)</changelog>
  <changelog author="varkoly@suse.com" date="1663934400">- Bump version to 1.9
- [clone-master-clean-up] Cleannup initiatorname.iscsi
  Remove all no comment files
  (bsc#1203024)</changelog>
  <changelog author="varkoly@suse.com" date="1666958400">- Bump version to 1.10
- clone-master-clean-up fails if postfix is not installed (bsc#1204835)
  Check if the directory does exists.</changelog>
</package>
<package pkgid="9b23572ecfc1b00e6696434a6c08d63ee695a0cd0f00e45d7850f99984889ed0" name="clone-master-clean-up" arch="noarch">
  <version epoch="0" ver="1.8" rel="150100.3.14.1"/>
  <changelog author="hguo@suse.com" date="1442232000">- Initial version, initial release.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Add clean up item: auto-generated HANA firewall script.</changelog>
  <changelog author="varkoly@suse.com" date="1449748800">- according to comment from Berthold Gunreben in comment #18 in
- FATE#318965 Allow Clone-Master creation, the random-seed files
- need to be deleted, too</changelog>
  <changelog author="hguo@suse.com" date="1452859200">- The following issues are addressed:
  * After wiping swap, the swap gets a new UUID, causing slow boot.
  * 70-persistent-net.rules is not removed.
  Along with several coding style and indentation fixes.
  (bsc#961906)</changelog>
  <changelog author="abriel@suse.com" date="1494849600">- The following changes are made to accomplish FATE#322066
  * remove some more files and directories (see man page for detailes)
  * add clone-master-clean-up.sysconfig, to give the user the possibillity for minimal intervention
  * add custom_remove.template to allow partner or customer specific removals</changelog>
  <changelog author="abriel@suse.com" date="1499342400">- The following changes are made to accomplish FATE#322066
  * Fix typos and improve man page</changelog>
  <changelog author="ro@suse.de" date="1517486400">- Prepare for new fillup location</changelog>
  <changelog author="dakechi@suse.com" date="1548849600">- Moved the configuration files out of the /var directory
  * Needed for compliance with transactional updates (bsc#1092378)</changelog>
  <changelog author="eich@suse.com" date="1564660800">- Wicked stores a number of files containing unique IDs and DHCP data
  in /var/lib/wicked/*. These files need to be removed for cloning:
  if machines with identical settings exist in the same network
  multiple times, IP addresses may change with each renewal
  (bsc#1139667)</changelog>
  <changelog author="eich@suse.com" date="1564747200">- Add _service file to fetch package form git.
  Add workaround for service osc_scm: avoid script to have the
  same name repository.</changelog>
  <changelog author="eich@suse.com" date="1565179200">- Install README.md and license file, fix build warnings.
- Fix _service-file:
  * Replace 'HEAD' version by 'master' branch:
    Right now, this project has just one single branch - track
    this as the release branch.
  * Add &lt;versionformat&gt;.</changelog>
  <changelog author="jengelh@inai.de" date="1566907200">- Use noun phrase in descriptions.</changelog>
  <changelog author="abriel@suse.com" date="1570536000">- Bump version to 1.5
- Don't show output from pushd/popd
- Make snapper snapshot removal more generic
  The output format is not really meant for machine reading, it's
  format has changed thus the simple parser broke.
  This now makes the parser more generic (using data from d-bus),
  also now it is ensured the snapshots are deleted in the correct
  order.
  (bsc#1149322)</changelog>
  <changelog author="abriel@suse.com" date="1597233600">- Bump version to 1.6
- cleanup salt client ID and osad authentication configuration
  file and the system ID
  (bsc#1174147)
- change the path of the template file in the comments of
  custom_remove.template and clone-master-clean-up.sh
  (jsc#TEAM-490)</changelog>
  <changelog author="abriel@suse.com" date="1661860800">- Bump version to 1.7
- CVE-2021-32000: fix some potentially dangerous file system
  operations
  (bsc#1181050)</changelog>
  <changelog author="varkoly@suse.com" date="1663848000">- Bump version to 1.8
- clone-master-clean-up fails to remove btrfs snapshots
  (bsc#1203651)</changelog>
</package>
<package pkgid="60c047ec4ee3801a53897904b1551ef0bca9339d5c3568a6d3a95af2240773af" name="clone-master-clean-up" arch="src">
  <version epoch="0" ver="1.8" rel="150100.3.14.1"/>
  <changelog author="hguo@suse.com" date="1442232000">- Initial version, initial release.</changelog>
  <changelog author="hguo@suse.com" date="1445601600">- Add clean up item: auto-generated HANA firewall script.</changelog>
  <changelog author="varkoly@suse.com" date="1449748800">- according to comment from Berthold Gunreben in comment #18 in
- FATE#318965 Allow Clone-Master creation, the random-seed files
- need to be deleted, too</changelog>
  <changelog author="hguo@suse.com" date="1452859200">- The following issues are addressed:
  * After wiping swap, the swap gets a new UUID, causing slow boot.
  * 70-persistent-net.rules is not removed.
  Along with several coding style and indentation fixes.
  (bsc#961906)</changelog>
  <changelog author="abriel@suse.com" date="1494849600">- The following changes are made to accomplish FATE#322066
  * remove some more files and directories (see man page for detailes)
  * add clone-master-clean-up.sysconfig, to give the user the possibillity for minimal intervention
  * add custom_remove.template to allow partner or customer specific removals</changelog>
  <changelog author="abriel@suse.com" date="1499342400">- The following changes are made to accomplish FATE#322066
  * Fix typos and improve man page</changelog>
  <changelog author="ro@suse.de" date="1517486400">- Prepare for new fillup location</changelog>
  <changelog author="dakechi@suse.com" date="1548849600">- Moved the configuration files out of the /var directory
  * Needed for compliance with transactional updates (bsc#1092378)</changelog>
  <changelog author="eich@suse.com" date="1564660800">- Wicked stores a number of files containing unique IDs and DHCP data
  in /var/lib/wicked/*. These files need to be removed for cloning:
  if machines with identical settings exist in the same network
  multiple times, IP addresses may change with each renewal
  (bsc#1139667)</changelog>
  <changelog author="eich@suse.com" date="1564747200">- Add _service file to fetch package form git.
  Add workaround for service osc_scm: avoid script to have the
  same name repository.</changelog>
  <changelog author="eich@suse.com" date="1565179200">- Install README.md and license file, fix build warnings.
- Fix _service-file:
  * Replace 'HEAD' version by 'master' branch:
    Right now, this project has just one single branch - track
    this as the release branch.
  * Add &lt;versionformat&gt;.</changelog>
  <changelog author="jengelh@inai.de" date="1566907200">- Use noun phrase in descriptions.</changelog>
  <changelog author="abriel@suse.com" date="1570536000">- Bump version to 1.5
- Don't show output from pushd/popd
- Make snapper snapshot removal more generic
  The output format is not really meant for machine reading, it's
  format has changed thus the simple parser broke.
  This now makes the parser more generic (using data from d-bus),
  also now it is ensured the snapshots are deleted in the correct
  order.
  (bsc#1149322)</changelog>
  <changelog author="abriel@suse.com" date="1597233600">- Bump version to 1.6
- cleanup salt client ID and osad authentication configuration
  file and the system ID
  (bsc#1174147)
- change the path of the template file in the comments of
  custom_remove.template and clone-master-clean-up.sh
  (jsc#TEAM-490)</changelog>
  <changelog author="abriel@suse.com" date="1661860800">- Bump version to 1.7
- CVE-2021-32000: fix some potentially dangerous file system
  operations
  (bsc#1181050)</changelog>
  <changelog author="varkoly@suse.com" date="1663848000">- Bump version to 1.8
- clone-master-clean-up fails to remove btrfs snapshots
  (bsc#1203651)</changelog>
</package>
<package pkgid="91edd44443122b3b27aa1d99a85bfdb3060c4fdf84854199aa4357bd45938651" name="cloud-regionsrv" arch="noarch">
  <version epoch="0" ver="8.1.3" rel="150300.11.9.1"/>
  <changelog author="rjschwei@suse.com" date="1422619200">- Update to version 6.0.2
  + modified config to accomodate changes in mod_wsgi
  + generalized script to generate the cert</changelog>
  <changelog author="rjschwei@suse.com" date="1462276800">- Update to version 7.0.0 - Include in SLE 12 FATE#320818
  + Increase key length to 2048
  + Code clean up, pep8 compliance
  + Upstream source location change to GitHub repo
  + Licensed GPLv3+</changelog>
  <changelog author="rjschwei@suse.com" date="1463572800">- Update to version 7.0.1
  + Fix argument parsing initialization in cert generator</changelog>
  <changelog author="rjschwei@suse.com" date="1479384000">- Include in SLE 12 (FATE#320818, bsc#979331)</changelog>
  <changelog author="rjschwei@suse.com" date="1517918400">- Update to version 8.0.0 (bsc#1079233)
  + Port to Python 3
  + Set subjevtAltName when generating a cert</changelog>
  <changelog author="rjschwei@suse.com" date="1518091200">- Update to version 8.0.1
  + Reduce memory footprint of running application</changelog>
  <changelog author="rjschwei@suse.com" date="1588680000">- Add find_all_matching_cidr.patch (bsc#1171232, bsc#1171233)
  + The prefix length matcher returned only the first cidr that was a
    possible match. In the final check that verifies that the requesters
    IP is in the range this might lead to a mismatch and thus a 404.</changelog>
  <changelog author="rjschwei@suse.com" date="1614513600">- Update to version 8.0.5 (bsc#1029162)
  + Improve region hint matching by forcing config settings and
    received regionHint to lower case
  + IPv6 support
  + Remove find_all_matching_cidr.patch home grown matcher removed</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 8.1.0 (bsc#1029162)
  + Enable multiple IP assignments (IPv4+IPv6) on TLS Certificate</changelog>
  <changelog author="jmason@suse.com" date="1631620800">- Update to version 8.1.1 (bsc#1190250)
  + Use a cross-filesystem compatible method to move certificates</changelog>
  <changelog author="jmason@suse.com" date="1633089600">- Update to version 8.1.2 (bsc#1190250)
  + Place certificate key in proper destination</changelog>
  <changelog author="rjschwei@suse.com" date="1668772800">- Update to version 8.1.3 (bsc#1195925, bsc#1195924, bsc#1191880)
  + In order for the client to handle cert changes properly we
    need to sned location information from the server. Otherwise fail over
    may end up in a different region.</changelog>
</package>
<package pkgid="416327b993b0355b24d00906a473673ae30a30e2182955b648c3151c5aba2e73" name="cloud-regionsrv" arch="src">
  <version epoch="0" ver="8.1.3" rel="150300.11.9.1"/>
  <changelog author="rschweikert@suse.com" date="1392897600">- add dependency to pyOpenSSL</changelog>
  <changelog author="rschweikert@suse.com" date="1393588800">- fix inconsistency between package and default configuration
  + package created /var/log/regionsrv and configuration expected
    /var/log/regionService. Fxed package to match configureation</changelog>
  <changelog author="rschweikert@suse.com" date="1395230400">- bump to version 3.0.3
  + fixed Makefile to address naming inconsistency of log directory</changelog>
  <changelog author="rschweikert@suse.com" date="1397476800">- update to version 4.0.0
  + removed automatic update feature, this is now handled by
    cspApacheAccessConfig
  &gt;&gt;&gt;&gt;&gt;&gt;&gt; ./cloud-regionsrv.changes.r12</changelog>
  <changelog author="rschweikert@suse.com" date="1398168000">- update to version 4.1.1
  + create a separate package for the configuration
  - this allows us to create packages for each cloud that just
    carry the configuration
  - provides a single point of update for the configuration for each cloud
  + let the cert generation code also update the ApacheAccessConfig
    service configuration file if it exists</changelog>
  <changelog author="rschweikert@suse.com" date="1400328000">- Update to version 4.1.2
  + create the regionsrv user, this was previously deleted accidentally
  + handle exception if the IP range is not properly formed for some
    reason</changelog>
  <changelog author="rschweikert@suse.com" date="1409659200">- Update to version 5.0.0
  + support multiple SMT servers per region
  + this is an incompatible change and breaks existing clients</changelog>
  <changelog author="rschweikert@suse.com" date="1412856000">- Update to version 6.0.0
  + accept a region hint from the client
    ~ the client can now provide a location hint by adding ?regionHint=
    to the URL. The server will first try to find a match using the IP
    address of the client and then fall back to the regionHint if it was
    provided. The caveat is that the client has to know the region names
    as they are configured in the regionData.cfg file. However, the region
    names are always well known for each cloud provider.
  + randomize the provided SMT information
    ~ to avoid always handing out the first listed SMT server in the
    configfile and thus loading this server with all requests, the order is
    now randomized.</changelog>
  <changelog author="rjschwei@suse.com" date="1422619200">- Update to version 6.0.2
  + modified config to accomodate changes in mod_wsgi
  + generalized script to generate the cert</changelog>
  <changelog author="rjschwei@suse.com" date="1462276800">- Update to version 7.0.0 - Include in SLE 12 FATE#320818
  + Increase key length to 2048
  + Code clean up, pep8 compliance
  + Upstream source location change to GitHub repo
  + Licensed GPLv3+</changelog>
  <changelog author="rjschwei@suse.com" date="1463572800">- Update to version 7.0.1
  + Fix argument parsing initialization in cert generator</changelog>
  <changelog author="rjschwei@suse.com" date="1479384000">- Include in SLE 12 (FATE#320818, bsc#979331)</changelog>
  <changelog author="rjschwei@suse.com" date="1517918400">- Update to version 8.0.0 (bsc#1079233)
  + Port to Python 3
  + Set subjevtAltName when generating a cert</changelog>
  <changelog author="rjschwei@suse.com" date="1518091200">- Update to version 8.0.1
  + Reduce memory footprint of running application</changelog>
  <changelog author="rjschwei@suse.com" date="1588680000">- Add find_all_matching_cidr.patch (bsc#1171232, bsc#1171233)
  + The prefix length matcher returned only the first cidr that was a
    possible match. In the final check that verifies that the requesters
    IP is in the range this might lead to a mismatch and thus a 404.</changelog>
  <changelog author="rjschwei@suse.com" date="1614513600">- Update to version 8.0.5 (bsc#1029162)
  + Improve region hint matching by forcing config settings and
    received regionHint to lower case
  + IPv6 support
  + Remove find_all_matching_cidr.patch home grown matcher removed</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 8.1.0 (bsc#1029162)
  + Enable multiple IP assignments (IPv4+IPv6) on TLS Certificate</changelog>
  <changelog author="jmason@suse.com" date="1631620800">- Update to version 8.1.1 (bsc#1190250)
  + Use a cross-filesystem compatible method to move certificates</changelog>
  <changelog author="jmason@suse.com" date="1633089600">- Update to version 8.1.2 (bsc#1190250)
  + Place certificate key in proper destination</changelog>
  <changelog author="rjschwei@suse.com" date="1668772800">- Update to version 8.1.3 (bsc#1195925, bsc#1195924, bsc#1191880)
  + In order for the client to handle cert changes properly we
    need to sned location information from the server. Otherwise fail over
    may end up in a different region.</changelog>
</package>
<package pkgid="880be258fab3d8d2ef1b3323222a348b2b12b35a1366bbad497783b76c02eb57" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.0.4" rel="150000.6.73.1"/>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
</package>
<package pkgid="2a9f1cb649691654611c07df0acfb5262e0a3f10b7b94660ba129cb64bd16993" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.0.4" rel="150000.6.73.1"/>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
</package>
<package pkgid="51d1b4e0fac8a46276af3447f92c2b79d79bcd050f47349d89a59831fb5afdf3" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.0.5" rel="150000.6.76.1"/>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
</package>
<package pkgid="a6e02587b902d3a8e84c2a6542f6a9bd073068a91bdd43bb67925d346eda28d8" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.0.5" rel="150000.6.76.1"/>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
</package>
<package pkgid="3611f30c4ff67205365a0e442e3dc48d35f3cc79abbb3303126ca41104694152" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.0.7" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="aa8e824f53e81f76f5661fb475696fff25a3d61284eef6bc227101e299aab242" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.0.7" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="f6c8b6f8a222947d51b30216e578a769f04816847e7d5ef671874143b9db144f" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.0.8" rel="150000.6.86.1"/>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
</package>
<package pkgid="10af239fad2936f76b29ca3b2740fa2639eb83fead92bc74fa8dd3bd0dd37759" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.0.8" rel="150000.6.86.1"/>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
</package>
<package pkgid="24633821c996888ab903da5d1207283fa3c01588793be3bc58effb972caf06d6" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.73.1"/>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
</package>
<package pkgid="560ef9fa201b7f09364d49321279d3f3a1d36146b81f2c323d78e322564ab906" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.76.1"/>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
</package>
<package pkgid="fb347f2b3dc68c213e654d8ceb2509f9ab6b901bc53b66d012c9c422edaad719" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="80a8b9bd26e0cb606d7980c5e68ce37f4b2650175ac76eeea8a6cb0301d50d2c" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.86.1"/>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
</package>
<package pkgid="f0d81d47aa2980ee32ef8fdc1db80ff7d6efc3c69d8f9518987011a94e12a830" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.73.1"/>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
</package>
<package pkgid="a1b2ee517ef34779f5dc5e0fc4d831e5937ac5f2abae019d2a4d0f8d6c1b1613" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.76.1"/>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
</package>
<package pkgid="a418635c8735d668362c1add632d7fc19da12d2daa93946dd940e992d10f5091" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="1535b45691a180df1b2f840527ea1e2009051c6ff8d63973a1d311d93538e22a" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.86.1"/>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
</package>
<package pkgid="5c0f42cd49275672609119f813e6ce0fd62dcdce0aacbe57733003fb610c6725" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.73.1"/>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
</package>
<package pkgid="4524e2b603bf261a834dd36e8faf7abffacfdaeecd4ba86830fb212a3583970e" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.76.1"/>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
</package>
<package pkgid="d11c5bcd0117ed245f2666fddbcaf565222468a50761808f392e4256538028f6" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="e57c751b8b4a50bbc57a322e7046b7e6bb59b40162fd471d38a6d59629444e22" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.86.1"/>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
</package>
<package pkgid="36bed4964eb85d2bffc5eaa6280b57164aab0d4389141dd66b4d9c73f79767a5" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.73.1"/>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
</package>
<package pkgid="731be4f12883eaf5167a9dcc5f12af09702ed451b162b8d8e67d59f6b17fc26a" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.76.1"/>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
</package>
<package pkgid="474bfccba2ddb72e57f7e1bb494b0d2a4e441c7ad6351f622ff24f0d1c824fc2" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="3028840de86477a94af2cb26f22381b80b367760f4833ea0e4d54f36937f6430" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.86.1"/>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
</package>
<package pkgid="85ee253ce869eff18d7ff11aff9d7ff06d2948e33379c8bc8aea08109a457e16" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.73.1"/>
  <changelog author="rjschwei@suse.com" date="1587384000">- Update to version 9.0.9 (bsc#1169599)
  + Handle the /etc/hosts file with Python 3.4 if there are non ascii
    characters in the file.</changelog>
  <changelog author="rjschwei@suse.com" date="1589803200">- Update to version 9.0.10 (bsc#1171704, bsc#1171705)
  + While the service starts After=network-online.target this is no
    guarantee that the cloud framework has configured the outgoing routing
    for the instance. This configuration on the framework side may take
    longer. Introduce a wait look that retries connections to the
    update infrastructure 3 times before giving up.</changelog>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
</package>
<package pkgid="2f714bbf19305cd85ab75302ad6ddd60981fa5639aaaa7d58f8b10e6735fef52" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.76.1"/>
  <changelog author="rjschwei@suse.com" date="1589889600">- Improve error message for failed update server access to determine
  product status</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1593432000">- Update to version 9.1.0 (bsc#1173474, bsc#1173475)
  + Introduce containerbuild-regionsrv service to allow container
    building tools to access required data for accessing Public Cloud RMTs</changelog>
  <changelog author="rjschwei@suse.com" date="1596196800">- Update to version 9.1.1 (bsc#1174731, bsc#1174732)
  + Do not immediately failover to a sibling system. Upon contact failure
    to the target system give the server/route time to recover. We have
    seen network instability trigger a pre-mature failover during initial
    registration causing problems later during updates.
  + When we do failover make sure the access credentials are known to the
    new target</changelog>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
</package>
<package pkgid="26e0a114e9c37b1015499649c35ae8e87cf9c05d03ddb8ce166c581785e208db" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.83.2"/>
  <changelog author="rjschwei@suse.com" date="1596628800">- Update to version 9.1.2 (bsc#1174791, bsc#1174937)
  + Implement changes to configure the client to use https only for
    outbound traffic
- plugin-ec2 to version 1.0.1 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
</package>
<package pkgid="3065d2bcf6f8063422d3fd2e4e82b692ad30052760b05a894990b44c69d5172e" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.86.1"/>
  <changelog author="rjschwei@suse.com" date="1598356800">- Update to version 9.1.3 (bsc#1175752, bsc#1175753)
  + Re-write the cache for the update server objects to avoid an
    attribute error that is triggered if the config is not set to
    https_only.</changelog>
  <changelog author="rjschwei@suse.com" date="1600862400">- Update to version 9.1.4 (bsc#1176858, bsc#1176859)
  + Properly handle the exit code for SUSEConnect and provide log
    message with failure details for registration failure</changelog>
  <changelog author="rjschwei@suse.com" date="1619438400">- Update to version 9.1.5 (bsc#1182779, bsc#1185234, bsc#1185198)
  + Another startup process may run zypper before the registration process
    if zypper is still running we cannot get the lock and as such
    the installed products cannot be determined. Wait for the lock to be
    released for up to 30 seconds.
  + On any error durring product list generation return a list to avoid
    a traceback by trying to iterate over None</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 9.2.0 (bsc#1029162)
  + Support IPv6 as best-effort, with fallback to IPv4</changelog>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
</package>
<package pkgid="a95973d81fd2ff37618893af8431f07b355bc3a5562652e5258c3ed3a6567210" name="cloud-regionsrv-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150300.11.9.1"/>
  <changelog author="rjschwei@suse.com" date="1422619200">- Update to version 6.0.2
  + modified config to accomodate changes in mod_wsgi
  + generalized script to generate the cert</changelog>
  <changelog author="rjschwei@suse.com" date="1462276800">- Update to version 7.0.0 - Include in SLE 12 FATE#320818
  + Increase key length to 2048
  + Code clean up, pep8 compliance
  + Upstream source location change to GitHub repo
  + Licensed GPLv3+</changelog>
  <changelog author="rjschwei@suse.com" date="1463572800">- Update to version 7.0.1
  + Fix argument parsing initialization in cert generator</changelog>
  <changelog author="rjschwei@suse.com" date="1479384000">- Include in SLE 12 (FATE#320818, bsc#979331)</changelog>
  <changelog author="rjschwei@suse.com" date="1517918400">- Update to version 8.0.0 (bsc#1079233)
  + Port to Python 3
  + Set subjevtAltName when generating a cert</changelog>
  <changelog author="rjschwei@suse.com" date="1518091200">- Update to version 8.0.1
  + Reduce memory footprint of running application</changelog>
  <changelog author="rjschwei@suse.com" date="1588680000">- Add find_all_matching_cidr.patch (bsc#1171232, bsc#1171233)
  + The prefix length matcher returned only the first cidr that was a
    possible match. In the final check that verifies that the requesters
    IP is in the range this might lead to a mismatch and thus a 404.</changelog>
  <changelog author="rjschwei@suse.com" date="1614513600">- Update to version 8.0.5 (bsc#1029162)
  + Improve region hint matching by forcing config settings and
    received regionHint to lower case
  + IPv6 support
  + Remove find_all_matching_cidr.patch home grown matcher removed</changelog>
  <changelog author="jmason@suse.com" date="1623758400">- Update to version 8.1.0 (bsc#1029162)
  + Enable multiple IP assignments (IPv4+IPv6) on TLS Certificate</changelog>
  <changelog author="jmason@suse.com" date="1631620800">- Update to version 8.1.1 (bsc#1190250)
  + Use a cross-filesystem compatible method to move certificates</changelog>
  <changelog author="jmason@suse.com" date="1633089600">- Update to version 8.1.2 (bsc#1190250)
  + Place certificate key in proper destination</changelog>
  <changelog author="rjschwei@suse.com" date="1668772800">- Update to version 8.1.3 (bsc#1195925, bsc#1195924, bsc#1191880)
  + In order for the client to handle cert changes properly we
    need to sned location information from the server. Otherwise fail over
    may end up in a different region.</changelog>
</package>
<package pkgid="c70a9c673a5c00d43f35c19e61b71ec60af5ca51e5b9a740a536d90c45355fd7" name="cluster-glue" arch="aarch64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="bb058e0a025e6c5458775c9aae0d21551365572ed92d22fd458baaba89835d5a" name="cluster-glue" arch="ppc64le">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="e04ed8eb4de59a767aec8cb66d826b43412a696d885aa9784d3095051051b648" name="cluster-glue" arch="s390x">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="94ac9725ae82706b9684e33486ad5f56fe5010eb5e8eb3aa677a8f28b96da8c6" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="d9fc5b3962d9f88f7ac98480d8894cbb88e1d1c3eaab861f591d56142da6d294" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="407f8ddef843038cea3cfb728a6f03f430dfcace0db481e915f5bf0778cf20ae" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.11.1"/>
  <changelog author="aabdallah@suse.de" date="1657281600">- ibmvnic: Properly dispose of all skbs during a failover
  (bsc#1200925).
- commit c771c51</changelog>
  <changelog author="ohering@suse.de" date="1657281601">- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
  (bsc#1200845).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
  (bsc#1200845).
- commit e1e83aa</changelog>
  <changelog author="bp@suse.de" date="1657281602">- x86/bugs: Add Cannon lake to RETBleed affected CPU list
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 739eddd</changelog>
  <changelog author="bp@suse.de" date="1657281603">- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 3be5cfd</changelog>
  <changelog author="bp@suse.de" date="1657281604">- x86/kexec: Disable RET on kexec (bsc#1199657 CVE-2022-29900
  CVE-2022-29901).
- commit d1e1c13</changelog>
  <changelog author="neilb@suse.de" date="1657540800">- don't call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- commit 9689c47</changelog>
  <changelog author="lduncan@suse.com" date="1657540801">- kABI: fix removal of iscsi_destroy_conn (bsc#1198410).
- kABI: fix change of iscsi_host_remove() arguments (bsc#1198410).
- scsi: iscsi: Fix session removal on shutdown (bsc#1198410).
- scsi: qedi: Use QEDI_MODE_NORMAL for error handling
  (bsc#1198410).
- scsi: iscsi: Add helper to remove a session from the kernel
  (bsc#1198410).
- scsi: iscsi: Clean up bound endpoints during shutdown
  (bsc#1198410).
- scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel
  (bsc#1198410).
- scsi: iscsi: Fix HW conn removal use after free (bsc#1198410).
- scsi: libiscsi: Teardown iscsi_cls_conn gracefully
  (bsc#1198410).
- scsi: iscsi: Add helper functions to manage iscsi_cls_conn
  (bsc#1198410).
- commit 3d68d7d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713600">- net: dpaa_eth: remove dead select in menuconfig FSL_DPAA_ETH (git-fixes).
- commit 5dea61c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713601">- can: rcar_canfd: add __maybe_unused annotation to silence warning (git-fixes).
- commit 3436390</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713602">- net: dsa: be compatible with masters which unregister on shutdown (git-fixes).
- commit 185c5a1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713603">- net: dsa: hellcreek: be compatible with masters which unregister on shutdown (git-fixes).
- commit b13c76a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713604">- net: dsa: microchip: ksz8863: be compatible with masters which unregister on shutdown (git-fixes).
- commit 8df6c27</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713605">- net: dsa: xrs700x: be compatible with masters which unregister on shutdown (git-fixes).
- commit 067f613</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713606">- octeontx2-af: Add a 'rvu_free_bitmap()' function (gix-fixes).
- commit bc0ad1c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713607">- octeontx2-af: Fix some memory leaks in the error handling path
  of 'cgx_lmac_init()' (git-fixes).
- commit 771ed28</changelog>
  <changelog author="jslaby@suse.cz" date="1657800000">- tty: use new tty_insert_flip_string_and_push_buffer() in
  pty_write() (bsc#1198829 CVE-2022-1462).
- tty: extract tty_flip_buffer_commit() from
  tty_flip_buffer_push() (bsc#1198829 CVE-2022-1462).
- commit decd358</changelog>
  <changelog author="jeffm@suse.com" date="1657800001">- rpm/kernel-binary.spec.in: Require dwarves &gt;= 1.22 on SLE15-SP3 or newer
  Dwarves 1.22 or newer is required to build kernels with BTF information
  embedded in modules.
- commit ee19e9d</changelog>
  <changelog author="jgross@suse.com" date="1657886400">- xen/netback: avoid entering xenvif_rx_next_skb() with an empty
  rx queue (bsc#1201381).
- commit bf00db7</changelog>
  <changelog author="bp@suse.de" date="1657886401">- x86/entry: Remove skip_r11rcx (bsc#1201524).
- Refresh
  patches.suse/x86-entry-Add-kernel-IBRS-implementation.patch.
- commit 64980c7</changelog>
  <changelog author="bp@suse.de" date="1657886402">- x86/ibt,xen: Sprinkle the ENDBR (bsc#1201471).
- Refresh patches.suse/objtool-Update-Retpoline-validation.patch.
- commit cf7f7e0</changelog>
</package>
<package pkgid="5bed484106d6434a15875994b93a2200de63095d275a754260d46417cf313544" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.18.1"/>
  <changelog author="lhenriques@suse.de" date="1658750400">- blacklist.conf: add commit 7acae6183cf3
  I blacklisted the wrong commit: instead of adding 7acae6183cf3, I added the
  commit that introduced the bug fixed by it (which isn't present in SLE15-SP4).
- commit 8ec5489</changelog>
  <changelog author="ohering@suse.de" date="1658836800">- VMCI: Release notification_bitmap in error path (bsc#1199291,
  jsc#SLE-24635).
- VMCI: Check exclusive_vectors when freeing interrupt 1
  (bsc#1199291, jsc#SLE-24635).
- VMCI: Fix some error handling paths in vmci_guest_probe_device()
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams receive
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams sends (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: allocate send and receive buffers for DMA
  datagrams (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: register dummy IRQ handlers for DMA datagrams
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: set OS page size (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: detect DMA datagram capability (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: add MMIO access to registers (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: whitespace formatting change for vmci register
  defines (bsc#1199291, jsc#SLE-24635).
- commit 0e13b0d</changelog>
  <changelog author="ohering@suse.com" date="1658836801">- VMCI: Add support for ARM64 (bsc#1199291, jsc#SLE-24635).
- commit 91f9b43</changelog>
  <changelog author="mgorman@suse.de" date="1658836802">- page_alloc: fix invalid watemark check on a negative value
  (git fixes (mm/pgalloc)).
- commit 11d19f6</changelog>
  <changelog author="msuchanek@suse.de" date="1658836803">- powerpc/pseries/mobility: set NMI watchdog factor during an LPM
  (bsc#1201846 ltc#198761).
- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846
  ltc#198761).
- watchdog: export lockup_detector_reconfigure (bsc#1201846
  ltc#198761).
- powerpc/mobility: wait for memory transfer to complete
  (bsc#1201846 ltc#198761).
- commit 4c3e250</changelog>
  <changelog author="oneukum@suse.com" date="1658923200">- Bluetooth: btusb: Add the new support IDs for WCN6855
  (git-fixxes).
- Refresh
  patches.suse/Bluetooth-btusb-Add-one-more-Bluetooth-part-for-WCN6.patch.
- commit 91ad5ba</changelog>
  <changelog author="oneukum@suse.com" date="1658923201">- random: document add_hwgenerator_randomness() with other input
  functions (git-fixes).
- commit 0fb6e8a</changelog>
  <changelog author="oneukum@suse.com" date="1658923202">- blacklist.conf: breaks kABI for a cleanup
- commit 678666e</changelog>
  <changelog author="oneukum@suse.com" date="1658923203">- random: fix typo in comments (git-fixes).
- commit 6de6114</changelog>
  <changelog author="oneukum@suse.com" date="1658923204">- blacklist.conf: duplicate
- commit 1c70642</changelog>
  <changelog author="oneukum@suse.com" date="1658923205">- tee: fix put order in teedev_close_context() (git-fixes).
- commit 1650ec3</changelog>
  <changelog author="oneukum@suse.com" date="1658923206">- blacklist.conf: This is a cleanup, not fixing any bug
- commit 6f050ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1658923207">- net/sched: cls_u32: fix netns refcount changes in u32_change()
  (CVE-2022-29581 bsc#1199665).
- commit 6f81977</changelog>
  <changelog author="bp@suse.de" date="1659182400">- kvm/emulate: Fix SETcc emulation function offsets with SLS
  (bsc#1201930).
- Refresh
  patches.suse/x86-kvm-Fix-SETcc-emulation-for-return-thunks.patch.
- commit 154606a</changelog>
  <changelog author="bp@suse.de" date="1659182401">- KVM: emulate: do not adjust size of fastop and setcc subroutines
  (bsc#1201930).
- commit 935d297</changelog>
  <changelog author="mgorman@suse.de" date="1659441600">- sched/core: Do not requeue task on CPU excluded from cpus_mask
  (bnc#1199356).
- commit f226af5</changelog>
  <changelog author="bp@suse.de" date="1659528000">- x86/speculation: Add RSB VM Exit protections (bsc#1201726
  CVE-2022-26373).
- commit 87cc728</changelog>
  <changelog author="bp@suse.de" date="1659528001">- x86/speculation: Add LFENCE to RSB fill sequence (bsc#1201726
  CVE-2022-26373).
- commit e9f7bfc</changelog>
  <changelog author="fweisbecker@suse.de" date="1659614400">- posix-cpu-timers: Cleanup CPU timers before freeing them during exec (CVE-2022-2585 bsc#1202094).
- commit 2decf97</changelog>
  <changelog author="tiwai@suse.de" date="1659614401">- fix race between exit_itimers() and /proc/pid/timers
  (git-fixes).
- commit 62d2eea</changelog>
</package>
<package pkgid="882cd139a29b4702ae9ee7c056faa4d90344fdfa6a0c1c6ebdf67411e7d208c8" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.21.2"/>
  <changelog author="oneukum@suse.com" date="1662465600">- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (git-fixes).
- commit 88f2cbc</changelog>
  <changelog author="oneukum@suse.com" date="1662465601">- drivers: usb: dwc3-qcom: Add sdm660 compatible (git-fixes).
- commit 4f92bad</changelog>
  <changelog author="oneukum@suse.com" date="1662465602">- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core (git-fixes).
- commit a9fc9d1</changelog>
  <changelog author="oneukum@suse.com" date="1662465603">- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (git-fixes).
- commit 4ff0a76</changelog>
  <changelog author="vbabka@suse.cz" date="1662465604">- mm: pagewalk: Fix race between unmap and page walker (git-fixes,
  bsc#1203159).
- commit 35d24e5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662465605">- netfilter: nf_tables: disallow binding to already bound chain
  (CVE-2022-39190 bsc#1203117).
- commit bb5b67f</changelog>
  <changelog author="oneukum@suse.com" date="1662465606">- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  (git-fixes).
- commit d57061d</changelog>
  <changelog author="dwagner@suse.de" date="1662465607">- nvme-fabrics: parse nvme connect Linux error codes
  (bsc#1201865).
- commit f1d7d3e</changelog>
  <changelog author="dwagner@suse.de" date="1662465608">- nvme-rdma: Handle number of queue changes (bsc#1201865).
- nvme-tcp: Handle number of queue changes (bsc#1201865).
- nvmet: Expose max queues to configfs (bsc#1201865).
- commit 51b9b2e</changelog>
  <changelog author="ptesarik@suse.cz" date="1662465609">- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB
  hugepages (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow
  VM_WRITE (git-fixes).
- scsi: zfcp: Fix missing auto port scan and thus missing target
  ports (git-fixes).
- s390/zcore: fix race when reading from hardware system area
  (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space
  (git-fixes).
- vfio/ccw: Do not change FSM state in subchannel event
  (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- s390/cpumf: Handle events cycles and instructions identical
  (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes
  copied (git-fixes).
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
  (git-fixes).
- s390/stp: clock_delta should be signed (git-fixes).
- s390/kexec: handle R_390_PLT32DBL rela in
  arch_kexec_apply_relocations_add() (git-fixes).
- commit 9886bfd</changelog>
  <changelog author="oneukum@suse.com" date="1662465610">- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  (git-fixes).
- commit f62cbbb</changelog>
  <changelog author="oneukum@suse.com" date="1662465611">- usb: gadget: f_uac2: clean up some inconsistent indenting
  (git-fixes).
- commit 44a2b58</changelog>
  <changelog author="oneukum@suse.com" date="1662465612">- USB: serial: ch314: use usb_control_msg_recv() (git-fixes).
- commit 53e1aa3</changelog>
  <changelog author="oneukum@suse.com" date="1662465613">- USB: serial: ch341: fix lost character on LCR updates
  (git-fixes).
- commit 62469ec</changelog>
  <changelog author="oneukum@suse.com" date="1662465614">- USB: serial: ch341: fix disabled rx timer on older devices
  (git-fixes).
- commit 9eefb78</changelog>
  <changelog author="dwagner@suse.de" date="1662465615">- nvme-tcp: fix UAF when detecting digest errors (bsc#1200313
  bsc#1201489).
- commit d1c233b</changelog>
  <changelog author="lduncan@suse.com" date="1662465616">- scsi: sg: Allow waiting for commands to complete on removed
  device (git-fixes).
- scsi: smartpqi: Fix DMA direction for RAID requests (git-fixes).
- scsi: mpt3sas: Stop fw fault watchdog work item during system
  shutdown (git-fixes).
- scsi: ufs: core: Fix another task management completion race
  (git-fixes).
- scsi: ufs: core: Fix task management completion timeout race
  (git-fixes).
- commit b8be98c</changelog>
  <changelog author="mbrugger@suse.com" date="1662465617">- net: stmmac: dwc-qos: Disable split header for Tegra194
  (bsc#1194904).
- net: stmmac: disable Split Header (SPH) for Intel platforms
  (bsc#1194904).
- commit 80bcb5a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662552000">- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
  (bsc#1202989).
- commit 2353f59</changelog>
  <changelog author="tiwai@suse.de" date="1662552001">- usb: gadget: f_uac2: fix superspeed transfer (git-fixes).
- commit 2e0f852</changelog>
</package>
<package pkgid="6fd3415c3822589fd56ab70cfde6980396380cc10fade1406c4ed5d5917c2109" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.28.1"/>
  <changelog author="oneukum@suse.com" date="1664971200">- media: st-delta: Fix PM disable depth imbalance in delta_probe
  (git-fixes).
- commit 30518b0</changelog>
  <changelog author="oneukum@suse.com" date="1664971201">- media: exynos4-is: Change clk_disable to clk_disable_unprepare
  (git-fixes).
- commit 332ca3f</changelog>
  <changelog author="oneukum@suse.com" date="1664971202">- media: vsp1: Fix offset calculation for plane cropping.
- commit dc309b5</changelog>
  <changelog author="oneukum@suse.com" date="1664971203">- blacklist.conf: not relevant in our configurations
- commit 8171bfe</changelog>
  <changelog author="oneukum@suse.com" date="1664971204">- media: imx-jpeg: Correct some definition according specification
  (git-fixes).
- commit bdf4126</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971205">- blacklist.conf: Append 'sysfb: Enable boot time VESA graphic mode selection'
- commit b93ba64</changelog>
  <changelog author="oneukum@suse.com" date="1664971206">- media: imx-jpeg: Leave a blank space before the configuration
  data (git-fixes).
- commit a2d45c7</changelog>
  <changelog author="bp@suse.de" date="1664971207">- x86/ibt,ftrace: Make function-graph play nice (bsc#1203969).
- commit c020446</changelog>
  <changelog author="oneukum@suse.com" date="1664971208">- media: imx-jpeg: Add pm-sleep support for imx-jpeg (git-fixes).
- commit d514aa5</changelog>
  <changelog author="oneukum@suse.com" date="1664971209">- media: imx-jpeg: Fix potential array out of bounds in
  queue_setup (git-fixes).
- commit 8041860</changelog>
  <changelog author="oneukum@suse.com" date="1664971210">- media: imx-jpeg: Refactor function mxc_jpeg_parse (git-fixes).
- commit e2ddfcf</changelog>
  <changelog author="oneukum@suse.com" date="1664971211">- media: imx-jpeg: Disable slot interrupt when frame done
  (git-fixes).
- commit 36d622f</changelog>
  <changelog author="oneukum@suse.com" date="1664971212">- blacklist.conf: not relevant in our configurations
- commit 586058b</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971213">- Clean up kernel-config settings via run_oldconfig.sh
  Invoke run_oldconfig.sh to clean the kernel-config settings from
  unset symbols. Otherwise these settings interfere with actual config
  changes.
- commit 8a799ae</changelog>
  <changelog author="oneukum@suse.com" date="1664971214">- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment.
- commit 20a025b</changelog>
  <changelog author="tiwai@suse.de" date="1665403200">- wifi: cfg80211: avoid nontransmitted BSS list corruption
  (CVE-2022-42721 bsc#1204060).
- wifi: cfg80211: fix BSS refcounting bugs (CVE-2022-42720
  bsc#1204059).
- commit 82311e4</changelog>
  <changelog author="tiwai@suse.de" date="1665403201">- wifi: mac80211: refactor elements parsing with parameter struct
  (CVE-2022-42719 bsc#1204051).
- mac80211: always allocate struct ieee802_11_elems
  (CVE-2022-42719 bsc#1204051).
- mac80211: mlme: find auth challenge directly (CVE-2022-42719
  bsc#1204051).
- mac80211: move CRC into struct ieee802_11_elems (CVE-2022-42719
  bsc#1204051).
- commit b28a982</changelog>
  <changelog author="tiwai@suse.de" date="1665403202">- mac80211: fix memory leaks with element parsing (CVE-2022-42719
  bsc#1204051).
- commit f9a2be2</changelog>
  <changelog author="tiwai@suse.de" date="1665403203">- wifi: mac80211: fix MBSSID parsing use-after-free
  (CVE-2022-42719 bsc#1204051).
- commit bab6e58</changelog>
  <changelog author="tiwai@suse.de" date="1665403204">- wifi: mac80211: fix crash in beacon protection for P2P-device
  (CVE-2022-42722 bsc#1204125).
- commit 38da0b9</changelog>
</package>
<package pkgid="6a7d54ba394f2e3e32959969708acccc44d03fce483c74cbe3d62825d1b85584" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.33.2"/>
  <changelog author="dwagner@suse.de" date="1667390400">- scsi: lpfc: Update the obsolete adapter list (bsc#1204142).
- commit dc8f2da</changelog>
  <changelog author="tiwai@suse.de" date="1667390401">- Drop Dell Dock regression fix patch again (bsc#1204719)
  It tunred out to be bogus, a different fix is needed
- commit 2c62bb9</changelog>
  <changelog author="tiwai@suse.de" date="1667390402">- wifi: brcmfmac: Fix potential buffer overflow in
  brcmf_fweh_event_worker() (CVE-2022-3628 bsc#1204868).
- commit 968feec</changelog>
  <changelog author="tiwai@suse.de" date="1667390403">- iommu/vt-d: Do not falsely log intel_iommu is unsupported
  kernel option (bsc#1204947).
- commit 440c18c</changelog>
  <changelog author="martin.wilck@suse.com" date="1667390404">- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- commit 0d14223</changelog>
  <changelog author="vkarasulli@suse.de" date="1667390405">- Update patch references to
  patches.suse/0001-floppy-disable-FDRAWCMD-by-default.patch
  (bsc#1200692 CVE-2022-33981).
- commit 913147c</changelog>
  <changelog author="msuchanek@suse.de" date="1667390406">- Refresh patches.suse/ppc64-kdump-Limit-kdump-base-to-512MB.patch
  to upstream version.
- commit 0f63234</changelog>
  <changelog author="tiwai@suse.de" date="1667476800">- ring-buffer: Check for NULL cpu_buffer in
  ring_buffer_wake_waiters() (bsc#1204705).
- commit 2e712ad</changelog>
  <changelog author="tiwai@suse.de" date="1667476801">- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
  (git-fixes).
- ALSA: usb-audio: make read-only array marker static const
  (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c
  (git-fixes).
- commit 7b36d72</changelog>
  <changelog author="tiwai@suse.de" date="1667476802">- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos
  (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-More-comprehensive-mixer-map-for-ASUS.patch.
- commit aad3dbe</changelog>
  <changelog author="tiwai@suse.de" date="1667476803">- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support
  (git-fixes).
- ALSA: scarlett2: Add support for the internal "standalone"
  switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections
  (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in
  scarlett2_usb() (git-fixes).
- commit 51a746f</changelog>
  <changelog author="tiwai@suse.de" date="1667476804">- ALSA: hiface: fix repeated words in comments (git-fixes).
- commit 1897e56</changelog>
  <changelog author="vbabka@suse.cz" date="1667476805">- Update kabi files. Refresh from Nov 2022 MU - 5.14.21-150400.24.28.1
- commit a5edbce</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1667476806">- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- commit 6f2ee60</changelog>
  <changelog author="tiwai@suse.de" date="1667563200">- blacklist.conf: add 8250_mtk entry that was reverted
- commit c43b30f</changelog>
  <changelog author="tiwai@suse.de" date="1667563201">- Move upstreamed BT fixes into sorted section
- commit 9cff1e2</changelog>
  <changelog author="tiwai@suse.de" date="1667563202">- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by
  l2cap_reassemble_sdu (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration
  (git-fixes).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- commit 9e67c0b</changelog>
  <changelog author="tiwai@suse.de" date="1667563203">- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- vsock: fix possible infinite sleep in
  vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg()
  (git-fixes).
- mISDN: fix possible memory leak in mISDN_register_device()
  (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame()
  (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in
  nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send()
  (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing
  the device (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or
  later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown
  (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being
  a V0.96 controller (git-fixes).
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into
  core (git-fixes).
- commit 356bf7e</changelog>
  <changelog author="tiwai@suse.de" date="1667563204">- x86/sev: Don't use cc_platform_has() for early SEV-SNP calls
  (bsc#1204970).
- x86/boot: Don't propagate uninitialized
  boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/compressed/64: Add identity mappings for setup_data entries
  (bsc#1204970).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Remove duplicated assignment to variable info
  (bsc#1204970).
- commit 1ad6c0c</changelog>
  <changelog author="tiwai@suse.de" date="1667563205">- Move upstreamed patches into sorted section
- commit 490afd7</changelog>
</package>
<package pkgid="438fc7739191ef95b9ccdac675b898215360451d7b88a3429184195b7f1f366b" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.38.1"/>
  <changelog author="fdmanana@suse.com" date="1670241600">- btrfs: send: remove unused found_type parameter to
  lookup_dir_item_inode() (bsc#1206036).
- commit 7f2d376</changelog>
  <changelog author="fdmanana@suse.com" date="1670241601">- btrfs: send: remove unused type parameter to iterate_inode_ref_t
  (bsc#1206036).
- commit 0e9e4f2</changelog>
  <changelog author="lhenriques@suse.de" date="1670241602">- ceph: avoid putting the realm twice when decoding snaps fails
  (bsc#1206051).
- ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
- ceph: fix memory leak in ceph_readdir when note_last_dentry
  returns  error (bsc#1206049).
- ceph: fix inode reference leakage in ceph_get_snapdir()
  (bsc#1206048).
- ceph: do not update snapshot context when there is no new
  snapshot (bsc#1206047).
- ceph: switch netfs read ops to use rreq-&gt;inode instead of
  rreq-&gt;mapping-&gt;host (bsc#1206046).
- ceph: properly handle statfs on multifs setups (bsc#1206045).
- commit 777e847</changelog>
  <changelog author="fdmanana@suse.com" date="1670241603">- btrfs: send: refactor arguments of get_inode_info()
  (bsc#1206036).
- commit a80bf85</changelog>
  <changelog author="fdmanana@suse.com" date="1670241604">- btrfs: send: use boolean types for current inode status
  (bsc#1206036).
- commit 36f86c0</changelog>
  <changelog author="fdmanana@suse.com" date="1670241605">- btrfs: send: fix failures when processing inodes with no links
  (bsc#1206036).
- commit f017ade</changelog>
  <changelog author="fdmanana@suse.com" date="1670241606">- btrfs: send: fix send failure of a subcase of orphan inodes
  (bsc#1206036).
- commit 90cbaac</changelog>
  <changelog author="fdmanana@suse.com" date="1670241607">- btrfs: fix processing of delayed data refs during backref
  walking (bsc#1206056).
- commit 2ec426f</changelog>
  <changelog author="fdmanana@suse.com" date="1670241608">- btrfs: fix processing of delayed tree block refs during backref
  walking (bsc#1206057).
- commit 83a8ed2</changelog>
  <changelog author="jgross@suse.com" date="1670414400">- xen/netback: Ensure protocol headers don't fall in the
  non-linear area (bsc#1206113, XSA-423, CVE-2022-3643).
- commit 6c8da66</changelog>
  <changelog author="jgross@suse.com" date="1670414401">- xen/netback: don't call kfree_skb() with interrupts disabled
  (bsc#1206114, XSA-424, CVE-2022-42328, CVE-2022-42329).
- commit 90098d3</changelog>
  <changelog author="jslaby@suse.cz" date="1670414402">- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon
  resume from S3 (bsc#1206037).
- commit 6215cd5</changelog>
  <changelog author="fdmanana@suse.com" date="1670414403">- btrfs: export a helper for compression hard check (bsc#1206149).
- commit f5cf2dc</changelog>
  <changelog author="fdmanana@suse.com" date="1670414404">- btrfs: do not allow compression on nodatacow files
  (bsc#1206149).
- commit 5167f62</changelog>
  <changelog author="fdmanana@suse.com" date="1670414405">- btrfs: check if root is readonly while setting security xattr
  (bsc#1206147).
- commit 50a73ba</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1670500800">- kbuild: Unify options for BTF generation for vmlinux and modules
  (bsc#1204693).
- Refresh patches.suse/kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch
- commit 5addeac</changelog>
  <changelog author="tiwai@suse.de" date="1670587200">- macsec: add missing attribute validation for offload
  (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in
  mdio_device_release() (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in
  get_l2cap_conn() (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
  (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator
  systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization
  (git-fixes).
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
  (git-fixes).
- nilfs2: fix NULL pointer dereference in
  nilfs_palloc_commit_free_entry() (git-fixes).
- commit a0e4929</changelog>
  <changelog author="tiwai@suse.de" date="1670587201">- selftests: rtnetlink: correct xfrm policy rule in
  kci_test_ipsec_offload (git-fixes).
- vmxnet3: use correct intrConf reference when using extended
  queues (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C
  strings (git-fixes).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- commit 3a866aa</changelog>
  <changelog author="tzimmermann@suse.de" date="1670587202">- Revert "drm/vc4: hvs: Reset muxes at probe time (git-fixes)." (bsc#1202341)
  This reverts commit 303122d0f2160411fa1068220bc59849d848550d.
  The reverted change clears hardware state on the RPi4, which leaves the
  screen blank. Without it, the display works correctly.
- commit 957f968</changelog>
  <changelog author="tiwai@suse.de" date="1670587203">- Update patch reference for proc fixes (CVE-2022-4378 bsc#1206207)
- commit cab6fa7</changelog>
</package>
<package pkgid="abdc7cddf994464a41f289e36c985f73c8e2350d17cb682495855e9f421d3295" name="cluster-md-kmp-64kb" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.41.1"/>
  <changelog author="msuchanek@suse.de" date="1673006400">- powerpc/powernv: add missing of_node_put (bsc#1065729).
- commit 678d5a8</changelog>
  <changelog author="tiwai@suse.de" date="1673265600">- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used
  (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- thermal: int340x: Add missing attribute for data rate base
  (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow
  (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property
  (git-fixes).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  (git-fixes).
- nfc: Fix potential resource leaks (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet
  (git-fixes).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe
  (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  (git-fixes).
- commit ac1915a</changelog>
  <changelog author="palcantara@suse.de" date="1673265601">- cifs: Fix kmap_local_page() unmapping (git-fixes).
- commit ff2c079</changelog>
  <changelog author="oneukum@suse.com" date="1673438400">- blacklist.conf: misattributed, we do not have this bug
- commit bc3473d</changelog>
  <changelog author="oneukum@suse.com" date="1673438401">- blacklist.conf: too risky
- commit 51ffe7a</changelog>
  <changelog author="oneukum@suse.com" date="1673438402">- blacklist.conf: misattributed
- commit ee5f25a</changelog>
  <changelog author="msuchanek@suse.de" date="1673438403">- powerpc: Take in account addition CPU node when building kexec
  FDT (bsc#1207016 ltc#201108).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- commit 4ca3eba</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673438404">- Refresh
  patches.suse/octeontx2-Move-devlink-registration-to-be-last-devli.patch.
  Added missing hunk in backport.
- commit 9b34e71</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673438405">- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- commit 32f938b</changelog>
  <changelog author="msuchanek@suse.de" date="1673438406">- ibmveth: Always stop tx queues during close (bsc#1065729).
- commit 11e0f4a</changelog>
  <changelog author="lduncan@suse.com" date="1673438407">- blacklist.conf: add two drbd git-fixes to ignore
- commit d03d927</changelog>
  <changelog author="oneukum@suse.com" date="1673438408">- Update
  patches.suse/dmaengine-idxd-Fix-crc_val-field-for-completion-reco.patch
  (bsc#1206554).
  Added bugzilla number
- commit 1fe5012</changelog>
  <changelog author="lduncan@suse.com" date="1673438409">- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free
  device/resource/connection (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: remove usage of list iterator variable after loop
  (git-fixes).
- commit 26591d7</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524800">- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online'
  and 'ret' (bsc#1205485).
- commit bac712b</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524801">- cpufreq: ACPI: Only set boost MSRs on supported CPUs
  (bsc#1205485).
- commit 2fc91f1</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524802">- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP
  mode (bsc#1201068).
- commit 15e54a9</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673524803">- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B
  header extraction support (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow
  (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
  (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly
  (jsc#SLE-24682).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC
  (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware
  (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count
  (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures
  (jsc#SLE-24682).
- octeontx2-af: Don't reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation
  (jsc#SLE-24682).
- commit a2de709</changelog>
  <changelog author="krisman@suse.de" date="1673524804">- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault
  path (performance bsc#1203219).
- commit 82bc0ed</changelog>
  <changelog author="oneukum@suse.com" date="1673611200">- media: stv0288: use explicitly signed char (git-fixes).
- commit 72af28b</changelog>
  <changelog author="tiwai@suse.de" date="1673611201">- nfc: pn533: Wait for out_urb's completion in
  pn533_usb_send_frame() (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude
  laptops (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit
  (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from
  podxt (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
  tablet (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses
  quirk (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
  (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF
  (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  (git-fixes).
- ima: Fix a potential NULL pointer access in
  ima_restore_measurement_list (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup
  (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook
  K3402ZA/K3502ZA (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/migrate: don't check the scratch page (git-fixes).
- commit 1d4442d</changelog>
</package>
<package pkgid="5f507998eaf34c7e5229bcdc91fdac6c84a857d16f9e0e4ac4de2214d8451d12" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.14.10.1"/>
  <changelog author="tiwai@suse.de" date="1659096000">- selftests/seccomp: Don't call read() on TTY from background pgrp
  (git-fixes).
- selftests: net: udpgro_fwd.sh: explicitly checking the available
  ping feature (git-fixes).
- commit 41741a6</changelog>
  <changelog author="dwagner@suse.de" date="1659096001">- Drop qla2xxx patch which prevented nvme port discovery
  (bsc#1200651 bsc#1200644 bsc#1201954 bsc#1201958)
  Upstream fixed the problem by reverting the offending commit.
  Delete:
  - patches.suse/scsi-qla2xxx-Fix-disk-failure-to-rediscover.patch
- commit ae1d1a3</changelog>
  <changelog author="dwagner@suse.de" date="1659096002">- scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958).
- scsi: qla2xxx: Update manufacturer details (bsc#1201958).
- scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958).
- scsi: qla2xxx: Fix discovery issues in FC-AL topology
  (bsc#1201958).
- scsi: qla2xxx: Fix imbalance vha-&gt;vref_count (bsc#1201958).
- scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958).
- scsi: qla2xxx: Fix response queue handler reading stale packets
  (bsc#1201958).
- scsi: qla2xxx: Zero undefined mailbox IN registers
  (bsc#1201958).
- scsi: qla2xxx: Fix incorrect display of max frame size
  (bsc#1201958).
- scsi: qla2xxx: Check correct variable in qla24xx_async_gffid()
  (bsc#1201958).
- commit 6c401ae</changelog>
  <changelog author="tiwai@suse.de" date="1659096003">- exfat: Drop superfluous new line for error messages
  (bsc#1201725).
- exfat: Downgrade ENAMETOOLONG error message to debug messages
  (bsc#1201725).
- exfat: Expand exfat_err() and co directly to pr_*() macro
  (bsc#1201725).
- exfat: Define NLS_NAME_* as bit flags explicitly (bsc#1201725).
- exfat: Return ENAMETOOLONG consistently for oversized paths
  (bsc#1201725).
- commit d002ca3</changelog>
  <changelog author="tiwai@suse.de" date="1659096004">- watch_queue: Fix missing rcu annotation (git-fixes).
- udmabuf: add back sanity check (git-fixes).
- xprtrdma: treat all calls not a bcall when bc_serv is NULL
  (git-fixes).
- wireguard: device: check for metadata_dst with skb_valid_dst()
  (git-fixes).
- zonefs: Fix management of open zones (git-fixes).
- zonefs: Clear inode information flags on inode creation
  (git-fixes).
- XArray: Update the LRU list in xas_split() (git-fixes).
- vsock/virtio: enable VQs early on probe (git-fixes).
- vsock/virtio: read the negotiated features before using VQs
  (git-fixes).
- vsock/virtio: initialize vdev-&gt;priv before using VQs
  (git-fixes).
- ucounts: Fix systemd LimitNPROC with private users regression
  (git-fixes).
- ucounts: Handle wrapping in is_ucounts_overlimit (git-fixes).
- ucounts: Base set_cred_ucounts changes on the real user
  (git-fixes).
- vsock: remove vsock from connected table when connect is
  interrupted by a signal (git-fixes).
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
  (git-fixes).
- ucounts: Fix rlimit max values check (git-fixes).
- zonefs: add MODULE_ALIAS_FS (git-fixes).
- ucounts: In set_cred_ucounts assume new-&gt;ucounts is non-NULL
  (git-fixes).
- commit 4dc2af2</changelog>
  <changelog author="tiwai@suse.de" date="1659096005">- tee: tee_get_drvdata(): fix description of return value
  (git-fixes).
- tunnels: do not assume mac header is set in
  skb_tunnel_check_pmtu() (git-fixes).
- tuntap: add sanity checks about msg_controllen in sendmsg
  (git-fixes).
- uaccess: fix type mismatch warnings from access_ok()
  (git-fixes).
- tests: fix idmapped mount_setattr test (git-fixes).
- seccomp: Invalidate seccomp mode to catch death failures
  (git-fixes).
- tee: optee: do not check memref size on return from Secure World
  (git-fixes).
- tools include UAPI: Sync sound/asound.h copy with the kernel
  sources (git-fixes).
- tools/testing/scatterlist: add missing defines (git-fixes).
- tools/nolibc: fix incorrect truncation of exit code (git-fixes).
- tools/nolibc: i386: fix initial stack alignment (git-fixes).
- tools/nolibc: x86-64: Fix startup code bug (git-fixes).
- tun: avoid double free in tun_free_netdev (git-fixes).
- commit 00b109c</changelog>
  <changelog author="tiwai@suse.de" date="1659096006">- scripts/gdb: change kernel config dumping method (git-fixes).
- samples/landlock: Format with clang-format (git-fixes).
- samples/landlock: Add clang-format exceptions (git-fixes).
- samples/landlock: Fix path_list memory leak (git-fixes).
- scripts/dtc: Call pkg-config POSIXly correct (git-fixes).
- optee: add error checks in optee_ffa_do_call_with_arg()
  (git-fixes).
- scripts: sphinx-pre-install: Fix ctex support on Debian
  (git-fixes).
- scripts: sphinx-pre-install: add required ctex dependency
  (git-fixes).
- commit c823894</changelog>
  <changelog author="tiwai@suse.de" date="1659096007">- tty: n_gsm: fix malformed counter for out of frame data
  (git-fixes).
- tty: n_gsm: fix frame reception handling (git-fixes).
- tty: n_gsm: fix wrong signal octet encoding in convergence
  layer type 2 (git-fixes).
- tty: n_gsm: fix mux cleanup after unregister tty device
  (git-fixes).
- tty: n_gsm: fix decoupled mux resource (git-fixes).
- tty: n_gsm: fix restart handling via CLD command (git-fixes).
- tty: n_gsm: fix encoding of command/response bit (git-fixes).
- tty: n_gsm: Save dlci address open status when config requester
  (git-fixes).
- tty: n_gsm: Modify CR,PF bit when config requester (git-fixes).
- commit 12973e3</changelog>
  <changelog author="tiwai@suse.de" date="1659096008">- tty: n_gsm: fix incorrect UA handling (git-fixes).
- tty: n_gsm: fix reset fifo race condition (git-fixes).
- tty: n_gsm: fix missing tty wakeup in convergence layer type 2
  (git-fixes).
- tty: n_gsm: fix wrong signal octets encoding in MSC (git-fixes).
- tty: n_gsm: fix wrong command frame length field encoding
  (git-fixes).
- tty: n_gsm: fix wrong command retry handling (git-fixes).
- tty: n_gsm: fix missing explicit ldisc flush (git-fixes).
- tty: n_gsm: fix wrong DLCI release order (git-fixes).
- tty: n_gsm: fix insufficient txframe size (git-fixes).
- commit 98e80d0</changelog>
  <changelog author="tiwai@suse.de" date="1659096009">- tty: n_gsm: fix missing update of modem controls after DLCI open
  (git-fixes).
- commit 421f4e7</changelog>
  <changelog author="tiwai@suse.de" date="1659096010">- tty: n_gsm: fix invalid gsmtty_write_room() result (git-fixes).
- tty: n_gsm: fix mux activation issues in gsm_config()
  (git-fixes).
- tty: n_gsm: fix buffer over-read in gsm_dlci_data() (git-fixes).
- tty: n_gsm: fix sometimes uninitialized warning in
  gsm_dlci_modem_output() (git-fixes).
- tty: n_gsm: fix software flow control handling (git-fixes).
- tty: n_gsm: fix invalid use of MSC in advanced option
  (git-fixes).
- commit 7c30f9f</changelog>
  <changelog author="dwagner@suse.de" date="1659096011">- nvme: consider also host_iface when checking ip options
  (bsc#1199670).
- commit 230f363</changelog>
  <changelog author="lduncan@suse.com" date="1659096012">- scsi: megaraid: Clear READ queue map's nr_queues (git-fixes).
- commit 55821eb</changelog>
  <changelog author="tiwai@suse.de" date="1659182400">- Revert selftest patches that have been reverted in stable-5.15.y
- commit a911337</changelog>
  <changelog author="tiwai@suse.de" date="1659182401">- drm/amd/display: Ignore First MST Sideband Message Return Error
  (git-fixes).
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
  (git-fixes).
- bitfield.h: Fix "type of reg too small for mask" test
  (git-fixes).
- Bluetooth: SCO: Fix sco_send_frame returning skb-&gt;len
  (git-fixes).
- Bluetooth: Fix passing NULL to PTR_ERR (git-fixes).
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with
  bt_skb_sendmmsg (git-fixes).
- Bluetooth: SCO: Replace use of memcpy_from_msg with
  bt_skb_sendmsg (git-fixes).
- Bluetooth: Add bt_skb_sendmmsg helper (git-fixes).
- Bluetooth: Add bt_skb_sendmsg helper (git-fixes).
- commit 68b3804</changelog>
  <changelog author="tiwai@suse.de" date="1659182402">- nouveau/svm: Fix to migrate all requested pages (git-fixes).
- watch_queue: Fix missing locking in add_watch_to_object()
  (git-fixes).
- watch-queue: remove spurious double semicolon (git-fixes).
- xhci: Set HCD flag to defer primary roothub registration
  (git-fixes).
- xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit (git-fixes).
- xhci: dbc: create and remove dbc structure in dbgtty driver
  (git-fixes).
- xhci: dbc: refactor xhci_dbc_init() (git-fixes).
- mtd: rawnand: gpmi: validate controller clock rate (git-fixes).
- pinctrl: armada-37xx: Convert to use dev_err_probe()
  (git-fixes).
- pinctrl: armada-37xx: Make use of the
  devm_platform_ioremap_resource() (git-fixes).
- pinctrl: armada-37xx: Use temporary variable for struct device
  (git-fixes).
- commit 7883bd5</changelog>
  <changelog author="tiwai@suse.de" date="1659182403">- watchqueue: make sure to serialize 'wqueue-&gt;defunct' properly
  (git-fixes).
- Refresh
  patches.suse/watch_queue-Fix-missing-rcu-annotation.patch.
- commit 0e9524c</changelog>
  <changelog author="bp@suse.de" date="1659182404">- kvm/emulate: Fix SETcc emulation function offsets with SLS
  (bsc#1201930).
- Refresh
  patches.suse/x86-kvm-Fix-SETcc-emulation-for-return-thunks.patch.
- commit d82b6fb</changelog>
  <changelog author="bp@suse.de" date="1659182405">- KVM: emulate: do not adjust size of fastop and setcc subroutines
  (bsc#1201930).
- commit acdd25a</changelog>
  <changelog author="tiwai@suse.de" date="1659268800">- ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (git-fixes).
- commit d7e1c73</changelog>
</package>
<package pkgid="d688c9f2aae66e4f47435bad5531a56f5d1a23d7825ae5049c572e756f91d377" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.14.10.1"/>
  <changelog author="tiwai@suse.de" date="1659096000">- selftests/seccomp: Don't call read() on TTY from background pgrp
  (git-fixes).
- selftests: net: udpgro_fwd.sh: explicitly checking the available
  ping feature (git-fixes).
- commit 41741a6</changelog>
  <changelog author="dwagner@suse.de" date="1659096001">- Drop qla2xxx patch which prevented nvme port discovery
  (bsc#1200651 bsc#1200644 bsc#1201954 bsc#1201958)
  Upstream fixed the problem by reverting the offending commit.
  Delete:
  - patches.suse/scsi-qla2xxx-Fix-disk-failure-to-rediscover.patch
- commit ae1d1a3</changelog>
  <changelog author="dwagner@suse.de" date="1659096002">- scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958).
- scsi: qla2xxx: Update manufacturer details (bsc#1201958).
- scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958).
- scsi: qla2xxx: Fix discovery issues in FC-AL topology
  (bsc#1201958).
- scsi: qla2xxx: Fix imbalance vha-&gt;vref_count (bsc#1201958).
- scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958).
- scsi: qla2xxx: Fix response queue handler reading stale packets
  (bsc#1201958).
- scsi: qla2xxx: Zero undefined mailbox IN registers
  (bsc#1201958).
- scsi: qla2xxx: Fix incorrect display of max frame size
  (bsc#1201958).
- scsi: qla2xxx: Check correct variable in qla24xx_async_gffid()
  (bsc#1201958).
- commit 6c401ae</changelog>
  <changelog author="tiwai@suse.de" date="1659096003">- exfat: Drop superfluous new line for error messages
  (bsc#1201725).
- exfat: Downgrade ENAMETOOLONG error message to debug messages
  (bsc#1201725).
- exfat: Expand exfat_err() and co directly to pr_*() macro
  (bsc#1201725).
- exfat: Define NLS_NAME_* as bit flags explicitly (bsc#1201725).
- exfat: Return ENAMETOOLONG consistently for oversized paths
  (bsc#1201725).
- commit d002ca3</changelog>
  <changelog author="tiwai@suse.de" date="1659096004">- watch_queue: Fix missing rcu annotation (git-fixes).
- udmabuf: add back sanity check (git-fixes).
- xprtrdma: treat all calls not a bcall when bc_serv is NULL
  (git-fixes).
- wireguard: device: check for metadata_dst with skb_valid_dst()
  (git-fixes).
- zonefs: Fix management of open zones (git-fixes).
- zonefs: Clear inode information flags on inode creation
  (git-fixes).
- XArray: Update the LRU list in xas_split() (git-fixes).
- vsock/virtio: enable VQs early on probe (git-fixes).
- vsock/virtio: read the negotiated features before using VQs
  (git-fixes).
- vsock/virtio: initialize vdev-&gt;priv before using VQs
  (git-fixes).
- ucounts: Fix systemd LimitNPROC with private users regression
  (git-fixes).
- ucounts: Handle wrapping in is_ucounts_overlimit (git-fixes).
- ucounts: Base set_cred_ucounts changes on the real user
  (git-fixes).
- vsock: remove vsock from connected table when connect is
  interrupted by a signal (git-fixes).
- xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create
  (git-fixes).
- ucounts: Fix rlimit max values check (git-fixes).
- zonefs: add MODULE_ALIAS_FS (git-fixes).
- ucounts: In set_cred_ucounts assume new-&gt;ucounts is non-NULL
  (git-fixes).
- commit 4dc2af2</changelog>
  <changelog author="tiwai@suse.de" date="1659096005">- tee: tee_get_drvdata(): fix description of return value
  (git-fixes).
- tunnels: do not assume mac header is set in
  skb_tunnel_check_pmtu() (git-fixes).
- tuntap: add sanity checks about msg_controllen in sendmsg
  (git-fixes).
- uaccess: fix type mismatch warnings from access_ok()
  (git-fixes).
- tests: fix idmapped mount_setattr test (git-fixes).
- seccomp: Invalidate seccomp mode to catch death failures
  (git-fixes).
- tee: optee: do not check memref size on return from Secure World
  (git-fixes).
- tools include UAPI: Sync sound/asound.h copy with the kernel
  sources (git-fixes).
- tools/testing/scatterlist: add missing defines (git-fixes).
- tools/nolibc: fix incorrect truncation of exit code (git-fixes).
- tools/nolibc: i386: fix initial stack alignment (git-fixes).
- tools/nolibc: x86-64: Fix startup code bug (git-fixes).
- tun: avoid double free in tun_free_netdev (git-fixes).
- commit 00b109c</changelog>
  <changelog author="tiwai@suse.de" date="1659096006">- scripts/gdb: change kernel config dumping method (git-fixes).
- samples/landlock: Format with clang-format (git-fixes).
- samples/landlock: Add clang-format exceptions (git-fixes).
- samples/landlock: Fix path_list memory leak (git-fixes).
- scripts/dtc: Call pkg-config POSIXly correct (git-fixes).
- optee: add error checks in optee_ffa_do_call_with_arg()
  (git-fixes).
- scripts: sphinx-pre-install: Fix ctex support on Debian
  (git-fixes).
- scripts: sphinx-pre-install: add required ctex dependency
  (git-fixes).
- commit c823894</changelog>
  <changelog author="tiwai@suse.de" date="1659096007">- tty: n_gsm: fix malformed counter for out of frame data
  (git-fixes).
- tty: n_gsm: fix frame reception handling (git-fixes).
- tty: n_gsm: fix wrong signal octet encoding in convergence
  layer type 2 (git-fixes).
- tty: n_gsm: fix mux cleanup after unregister tty device
  (git-fixes).
- tty: n_gsm: fix decoupled mux resource (git-fixes).
- tty: n_gsm: fix restart handling via CLD command (git-fixes).
- tty: n_gsm: fix encoding of command/response bit (git-fixes).
- tty: n_gsm: Save dlci address open status when config requester
  (git-fixes).
- tty: n_gsm: Modify CR,PF bit when config requester (git-fixes).
- commit 12973e3</changelog>
  <changelog author="tiwai@suse.de" date="1659096008">- tty: n_gsm: fix incorrect UA handling (git-fixes).
- tty: n_gsm: fix reset fifo race condition (git-fixes).
- tty: n_gsm: fix missing tty wakeup in convergence layer type 2
  (git-fixes).
- tty: n_gsm: fix wrong signal octets encoding in MSC (git-fixes).
- tty: n_gsm: fix wrong command frame length field encoding
  (git-fixes).
- tty: n_gsm: fix wrong command retry handling (git-fixes).
- tty: n_gsm: fix missing explicit ldisc flush (git-fixes).
- tty: n_gsm: fix wrong DLCI release order (git-fixes).
- tty: n_gsm: fix insufficient txframe size (git-fixes).
- commit 98e80d0</changelog>
  <changelog author="tiwai@suse.de" date="1659096009">- tty: n_gsm: fix missing update of modem controls after DLCI open
  (git-fixes).
- commit 421f4e7</changelog>
  <changelog author="tiwai@suse.de" date="1659096010">- tty: n_gsm: fix invalid gsmtty_write_room() result (git-fixes).
- tty: n_gsm: fix mux activation issues in gsm_config()
  (git-fixes).
- tty: n_gsm: fix buffer over-read in gsm_dlci_data() (git-fixes).
- tty: n_gsm: fix sometimes uninitialized warning in
  gsm_dlci_modem_output() (git-fixes).
- tty: n_gsm: fix software flow control handling (git-fixes).
- tty: n_gsm: fix invalid use of MSC in advanced option
  (git-fixes).
- commit 7c30f9f</changelog>
  <changelog author="dwagner@suse.de" date="1659096011">- nvme: consider also host_iface when checking ip options
  (bsc#1199670).
- commit 230f363</changelog>
  <changelog author="lduncan@suse.com" date="1659096012">- scsi: megaraid: Clear READ queue map's nr_queues (git-fixes).
- commit 55821eb</changelog>
  <changelog author="tiwai@suse.de" date="1659182400">- Revert selftest patches that have been reverted in stable-5.15.y
- commit a911337</changelog>
  <changelog author="tiwai@suse.de" date="1659182401">- drm/amd/display: Ignore First MST Sideband Message Return Error
  (git-fixes).
- Bluetooth: Fix bt_skb_sendmmsg not allocating partial chunks
  (git-fixes).
- bitfield.h: Fix "type of reg too small for mask" test
  (git-fixes).
- Bluetooth: SCO: Fix sco_send_frame returning skb-&gt;len
  (git-fixes).
- Bluetooth: Fix passing NULL to PTR_ERR (git-fixes).
- Bluetooth: RFCOMM: Replace use of memcpy_from_msg with
  bt_skb_sendmmsg (git-fixes).
- Bluetooth: SCO: Replace use of memcpy_from_msg with
  bt_skb_sendmsg (git-fixes).
- Bluetooth: Add bt_skb_sendmmsg helper (git-fixes).
- Bluetooth: Add bt_skb_sendmsg helper (git-fixes).
- commit 68b3804</changelog>
  <changelog author="tiwai@suse.de" date="1659182402">- nouveau/svm: Fix to migrate all requested pages (git-fixes).
- watch_queue: Fix missing locking in add_watch_to_object()
  (git-fixes).
- watch-queue: remove spurious double semicolon (git-fixes).
- xhci: Set HCD flag to defer primary roothub registration
  (git-fixes).
- xhci: dbc: Rename xhci_dbc_init and xhci_dbc_exit (git-fixes).
- xhci: dbc: create and remove dbc structure in dbgtty driver
  (git-fixes).
- xhci: dbc: refactor xhci_dbc_init() (git-fixes).
- mtd: rawnand: gpmi: validate controller clock rate (git-fixes).
- pinctrl: armada-37xx: Convert to use dev_err_probe()
  (git-fixes).
- pinctrl: armada-37xx: Make use of the
  devm_platform_ioremap_resource() (git-fixes).
- pinctrl: armada-37xx: Use temporary variable for struct device
  (git-fixes).
- commit 7883bd5</changelog>
  <changelog author="tiwai@suse.de" date="1659182403">- watchqueue: make sure to serialize 'wqueue-&gt;defunct' properly
  (git-fixes).
- Refresh
  patches.suse/watch_queue-Fix-missing-rcu-annotation.patch.
- commit 0e9524c</changelog>
  <changelog author="bp@suse.de" date="1659182404">- kvm/emulate: Fix SETcc emulation function offsets with SLS
  (bsc#1201930).
- Refresh
  patches.suse/x86-kvm-Fix-SETcc-emulation-for-return-thunks.patch.
- commit d82b6fb</changelog>
  <changelog author="bp@suse.de" date="1659182405">- KVM: emulate: do not adjust size of fastop and setcc subroutines
  (bsc#1201930).
- commit acdd25a</changelog>
  <changelog author="tiwai@suse.de" date="1659268800">- ARM: 9216/1: Fix MAX_DMA_ADDRESS overflow (git-fixes).
- commit d7e1c73</changelog>
</package>
<package pkgid="14c3c8bad1683621fe31e3d81d6e3ac9fb1375a32e5cae5c4daa1ab6014bbbf0" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.14.13.1"/>
  <changelog author="oneukum@suse.com" date="1662465600">- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (git-fixes).
- commit 88f2cbc</changelog>
  <changelog author="oneukum@suse.com" date="1662465601">- drivers: usb: dwc3-qcom: Add sdm660 compatible (git-fixes).
- commit 4f92bad</changelog>
  <changelog author="oneukum@suse.com" date="1662465602">- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core (git-fixes).
- commit a9fc9d1</changelog>
  <changelog author="oneukum@suse.com" date="1662465603">- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (git-fixes).
- commit 4ff0a76</changelog>
  <changelog author="vbabka@suse.cz" date="1662465604">- mm: pagewalk: Fix race between unmap and page walker (git-fixes,
  bsc#1203159).
- commit 35d24e5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662465605">- netfilter: nf_tables: disallow binding to already bound chain
  (CVE-2022-39190 bsc#1203117).
- commit bb5b67f</changelog>
  <changelog author="oneukum@suse.com" date="1662465606">- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  (git-fixes).
- commit d57061d</changelog>
  <changelog author="dwagner@suse.de" date="1662465607">- nvme-fabrics: parse nvme connect Linux error codes
  (bsc#1201865).
- commit f1d7d3e</changelog>
  <changelog author="dwagner@suse.de" date="1662465608">- nvme-rdma: Handle number of queue changes (bsc#1201865).
- nvme-tcp: Handle number of queue changes (bsc#1201865).
- nvmet: Expose max queues to configfs (bsc#1201865).
- commit 51b9b2e</changelog>
  <changelog author="ptesarik@suse.cz" date="1662465609">- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB
  hugepages (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow
  VM_WRITE (git-fixes).
- scsi: zfcp: Fix missing auto port scan and thus missing target
  ports (git-fixes).
- s390/zcore: fix race when reading from hardware system area
  (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space
  (git-fixes).
- vfio/ccw: Do not change FSM state in subchannel event
  (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- s390/cpumf: Handle events cycles and instructions identical
  (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes
  copied (git-fixes).
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
  (git-fixes).
- s390/stp: clock_delta should be signed (git-fixes).
- s390/kexec: handle R_390_PLT32DBL rela in
  arch_kexec_apply_relocations_add() (git-fixes).
- commit 9886bfd</changelog>
  <changelog author="oneukum@suse.com" date="1662465610">- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  (git-fixes).
- commit f62cbbb</changelog>
  <changelog author="oneukum@suse.com" date="1662465611">- usb: gadget: f_uac2: clean up some inconsistent indenting
  (git-fixes).
- commit 44a2b58</changelog>
  <changelog author="oneukum@suse.com" date="1662465612">- USB: serial: ch314: use usb_control_msg_recv() (git-fixes).
- commit 53e1aa3</changelog>
  <changelog author="oneukum@suse.com" date="1662465613">- USB: serial: ch341: fix lost character on LCR updates
  (git-fixes).
- commit 62469ec</changelog>
  <changelog author="oneukum@suse.com" date="1662465614">- USB: serial: ch341: fix disabled rx timer on older devices
  (git-fixes).
- commit 9eefb78</changelog>
  <changelog author="dwagner@suse.de" date="1662465615">- nvme-tcp: fix UAF when detecting digest errors (bsc#1200313
  bsc#1201489).
- commit d1c233b</changelog>
  <changelog author="lduncan@suse.com" date="1662465616">- scsi: sg: Allow waiting for commands to complete on removed
  device (git-fixes).
- scsi: smartpqi: Fix DMA direction for RAID requests (git-fixes).
- scsi: mpt3sas: Stop fw fault watchdog work item during system
  shutdown (git-fixes).
- scsi: ufs: core: Fix another task management completion race
  (git-fixes).
- scsi: ufs: core: Fix task management completion timeout race
  (git-fixes).
- commit b8be98c</changelog>
  <changelog author="mbrugger@suse.com" date="1662465617">- net: stmmac: dwc-qos: Disable split header for Tegra194
  (bsc#1194904).
- net: stmmac: disable Split Header (SPH) for Intel platforms
  (bsc#1194904).
- commit 80bcb5a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662552000">- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
  (bsc#1202989).
- commit 2353f59</changelog>
  <changelog author="tiwai@suse.de" date="1662552001">- usb: gadget: f_uac2: fix superspeed transfer (git-fixes).
- commit 2e0f852</changelog>
</package>
<package pkgid="ee8658c65af80b2fac786259987a41c056413470dea508dec8ea85bced259cda" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.14.13.1"/>
  <changelog author="oneukum@suse.com" date="1662465600">- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (git-fixes).
- commit 88f2cbc</changelog>
  <changelog author="oneukum@suse.com" date="1662465601">- drivers: usb: dwc3-qcom: Add sdm660 compatible (git-fixes).
- commit 4f92bad</changelog>
  <changelog author="oneukum@suse.com" date="1662465602">- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core (git-fixes).
- commit a9fc9d1</changelog>
  <changelog author="oneukum@suse.com" date="1662465603">- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (git-fixes).
- commit 4ff0a76</changelog>
  <changelog author="vbabka@suse.cz" date="1662465604">- mm: pagewalk: Fix race between unmap and page walker (git-fixes,
  bsc#1203159).
- commit 35d24e5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662465605">- netfilter: nf_tables: disallow binding to already bound chain
  (CVE-2022-39190 bsc#1203117).
- commit bb5b67f</changelog>
  <changelog author="oneukum@suse.com" date="1662465606">- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  (git-fixes).
- commit d57061d</changelog>
  <changelog author="dwagner@suse.de" date="1662465607">- nvme-fabrics: parse nvme connect Linux error codes
  (bsc#1201865).
- commit f1d7d3e</changelog>
  <changelog author="dwagner@suse.de" date="1662465608">- nvme-rdma: Handle number of queue changes (bsc#1201865).
- nvme-tcp: Handle number of queue changes (bsc#1201865).
- nvmet: Expose max queues to configfs (bsc#1201865).
- commit 51b9b2e</changelog>
  <changelog author="ptesarik@suse.cz" date="1662465609">- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB
  hugepages (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow
  VM_WRITE (git-fixes).
- scsi: zfcp: Fix missing auto port scan and thus missing target
  ports (git-fixes).
- s390/zcore: fix race when reading from hardware system area
  (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space
  (git-fixes).
- vfio/ccw: Do not change FSM state in subchannel event
  (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- s390/cpumf: Handle events cycles and instructions identical
  (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes
  copied (git-fixes).
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
  (git-fixes).
- s390/stp: clock_delta should be signed (git-fixes).
- s390/kexec: handle R_390_PLT32DBL rela in
  arch_kexec_apply_relocations_add() (git-fixes).
- commit 9886bfd</changelog>
  <changelog author="oneukum@suse.com" date="1662465610">- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  (git-fixes).
- commit f62cbbb</changelog>
  <changelog author="oneukum@suse.com" date="1662465611">- usb: gadget: f_uac2: clean up some inconsistent indenting
  (git-fixes).
- commit 44a2b58</changelog>
  <changelog author="oneukum@suse.com" date="1662465612">- USB: serial: ch314: use usb_control_msg_recv() (git-fixes).
- commit 53e1aa3</changelog>
  <changelog author="oneukum@suse.com" date="1662465613">- USB: serial: ch341: fix lost character on LCR updates
  (git-fixes).
- commit 62469ec</changelog>
  <changelog author="oneukum@suse.com" date="1662465614">- USB: serial: ch341: fix disabled rx timer on older devices
  (git-fixes).
- commit 9eefb78</changelog>
  <changelog author="dwagner@suse.de" date="1662465615">- nvme-tcp: fix UAF when detecting digest errors (bsc#1200313
  bsc#1201489).
- commit d1c233b</changelog>
  <changelog author="lduncan@suse.com" date="1662465616">- scsi: sg: Allow waiting for commands to complete on removed
  device (git-fixes).
- scsi: smartpqi: Fix DMA direction for RAID requests (git-fixes).
- scsi: mpt3sas: Stop fw fault watchdog work item during system
  shutdown (git-fixes).
- scsi: ufs: core: Fix another task management completion race
  (git-fixes).
- scsi: ufs: core: Fix task management completion timeout race
  (git-fixes).
- commit b8be98c</changelog>
  <changelog author="mbrugger@suse.com" date="1662465617">- net: stmmac: dwc-qos: Disable split header for Tegra194
  (bsc#1194904).
- net: stmmac: disable Split Header (SPH) for Intel platforms
  (bsc#1194904).
- commit 80bcb5a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662552000">- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
  (bsc#1202989).
- commit 2353f59</changelog>
  <changelog author="tiwai@suse.de" date="1662552001">- usb: gadget: f_uac2: fix superspeed transfer (git-fixes).
- commit 2e0f852</changelog>
</package>
<package pkgid="f0bf29a69a43fc753bc1b4e6f29add8b2cfdd2f9b41e2b7b9c7688ba75cdd722" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.14.16.1"/>
  <changelog author="oneukum@suse.com" date="1664971200">- media: coda: Add more H264 levels for CODA960 (git-fixes).
- commit 75d6462</changelog>
  <changelog author="oneukum@suse.com" date="1664971201">- media: aspeed: Fix an error handling path in
  aspeed_video_probe() (git-fixes).
- commit c014d5c</changelog>
  <changelog author="oneukum@suse.com" date="1664971202">- media: exynos4-is: Fix PM disable depth imbalance in
  fimc_is_probe (git-fixes).
- commit f62e31e</changelog>
  <changelog author="oneukum@suse.com" date="1664971203">- media: st-delta: Fix PM disable depth imbalance in delta_probe
  (git-fixes).
- commit 30518b0</changelog>
  <changelog author="oneukum@suse.com" date="1664971204">- media: exynos4-is: Change clk_disable to clk_disable_unprepare
  (git-fixes).
- commit 332ca3f</changelog>
  <changelog author="oneukum@suse.com" date="1664971205">- media: vsp1: Fix offset calculation for plane cropping.
- commit dc309b5</changelog>
  <changelog author="oneukum@suse.com" date="1664971206">- blacklist.conf: not relevant in our configurations
- commit 8171bfe</changelog>
  <changelog author="oneukum@suse.com" date="1664971207">- media: imx-jpeg: Correct some definition according specification
  (git-fixes).
- commit bdf4126</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971208">- blacklist.conf: Append 'sysfb: Enable boot time VESA graphic mode selection'
- commit b93ba64</changelog>
  <changelog author="oneukum@suse.com" date="1664971209">- media: imx-jpeg: Leave a blank space before the configuration
  data (git-fixes).
- commit a2d45c7</changelog>
  <changelog author="bp@suse.de" date="1664971210">- x86/ibt,ftrace: Make function-graph play nice (bsc#1203969).
- commit c020446</changelog>
  <changelog author="oneukum@suse.com" date="1664971211">- media: imx-jpeg: Add pm-sleep support for imx-jpeg (git-fixes).
- commit d514aa5</changelog>
  <changelog author="oneukum@suse.com" date="1664971212">- media: imx-jpeg: Fix potential array out of bounds in
  queue_setup (git-fixes).
- commit 8041860</changelog>
  <changelog author="oneukum@suse.com" date="1664971213">- media: imx-jpeg: Refactor function mxc_jpeg_parse (git-fixes).
- commit e2ddfcf</changelog>
  <changelog author="oneukum@suse.com" date="1664971214">- media: imx-jpeg: Disable slot interrupt when frame done
  (git-fixes).
- commit 36d622f</changelog>
  <changelog author="oneukum@suse.com" date="1664971215">- blacklist.conf: not relevant in our configurations
- commit 586058b</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971216">- Clean up kernel-config settings via run_oldconfig.sh
  Invoke run_oldconfig.sh to clean the kernel-config settings from
  unset symbols. Otherwise these settings interfere with actual config
  changes.
- commit 8a799ae</changelog>
  <changelog author="ohering@suse.de" date="1664971217">- disable CS_DSP (bsc#1203699)
- commit dc001a8</changelog>
  <changelog author="oneukum@suse.com" date="1664971218">- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment.
- commit 20a025b</changelog>
  <changelog author="ohering@suse.de" date="1665057600">- build mlx in x86_64/azure as modules again (bsc#1203701)
  There is little gain by having the drivers built into the kernel.
  Having them as modules allows easy replacement by third party drivers.
- commit ac2f01a</changelog>
</package>
<package pkgid="e2acc948d5b41c13fe0f9d9b40b0741aaf47c8136b5150482051d6cd554741ac" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.14.16.1"/>
  <changelog author="oneukum@suse.com" date="1664971200">- media: coda: Add more H264 levels for CODA960 (git-fixes).
- commit 75d6462</changelog>
  <changelog author="oneukum@suse.com" date="1664971201">- media: aspeed: Fix an error handling path in
  aspeed_video_probe() (git-fixes).
- commit c014d5c</changelog>
  <changelog author="oneukum@suse.com" date="1664971202">- media: exynos4-is: Fix PM disable depth imbalance in
  fimc_is_probe (git-fixes).
- commit f62e31e</changelog>
  <changelog author="oneukum@suse.com" date="1664971203">- media: st-delta: Fix PM disable depth imbalance in delta_probe
  (git-fixes).
- commit 30518b0</changelog>
  <changelog author="oneukum@suse.com" date="1664971204">- media: exynos4-is: Change clk_disable to clk_disable_unprepare
  (git-fixes).
- commit 332ca3f</changelog>
  <changelog author="oneukum@suse.com" date="1664971205">- media: vsp1: Fix offset calculation for plane cropping.
- commit dc309b5</changelog>
  <changelog author="oneukum@suse.com" date="1664971206">- blacklist.conf: not relevant in our configurations
- commit 8171bfe</changelog>
  <changelog author="oneukum@suse.com" date="1664971207">- media: imx-jpeg: Correct some definition according specification
  (git-fixes).
- commit bdf4126</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971208">- blacklist.conf: Append 'sysfb: Enable boot time VESA graphic mode selection'
- commit b93ba64</changelog>
  <changelog author="oneukum@suse.com" date="1664971209">- media: imx-jpeg: Leave a blank space before the configuration
  data (git-fixes).
- commit a2d45c7</changelog>
  <changelog author="bp@suse.de" date="1664971210">- x86/ibt,ftrace: Make function-graph play nice (bsc#1203969).
- commit c020446</changelog>
  <changelog author="oneukum@suse.com" date="1664971211">- media: imx-jpeg: Add pm-sleep support for imx-jpeg (git-fixes).
- commit d514aa5</changelog>
  <changelog author="oneukum@suse.com" date="1664971212">- media: imx-jpeg: Fix potential array out of bounds in
  queue_setup (git-fixes).
- commit 8041860</changelog>
  <changelog author="oneukum@suse.com" date="1664971213">- media: imx-jpeg: Refactor function mxc_jpeg_parse (git-fixes).
- commit e2ddfcf</changelog>
  <changelog author="oneukum@suse.com" date="1664971214">- media: imx-jpeg: Disable slot interrupt when frame done
  (git-fixes).
- commit 36d622f</changelog>
  <changelog author="oneukum@suse.com" date="1664971215">- blacklist.conf: not relevant in our configurations
- commit 586058b</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971216">- Clean up kernel-config settings via run_oldconfig.sh
  Invoke run_oldconfig.sh to clean the kernel-config settings from
  unset symbols. Otherwise these settings interfere with actual config
  changes.
- commit 8a799ae</changelog>
  <changelog author="ohering@suse.de" date="1664971217">- disable CS_DSP (bsc#1203699)
- commit dc001a8</changelog>
  <changelog author="oneukum@suse.com" date="1664971218">- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment.
- commit 20a025b</changelog>
  <changelog author="ohering@suse.de" date="1665057600">- build mlx in x86_64/azure as modules again (bsc#1203701)
  There is little gain by having the drivers built into the kernel.
  Having them as modules allows easy replacement by third party drivers.
- commit ac2f01a</changelog>
</package>
<package pkgid="c97ff7e909d48a329841fd3d6d2efd89dd7e40644eb19ba7f044b1f55abc6c4f" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.14.21.2"/>
  <changelog author="tiwai@suse.de" date="1667390400">- Drop Dell Dock regression fix patch again (bsc#1204719)
  It tunred out to be bogus, a different fix is needed
- commit 2c62bb9</changelog>
  <changelog author="tiwai@suse.de" date="1667390401">- wifi: brcmfmac: Fix potential buffer overflow in
  brcmf_fweh_event_worker() (CVE-2022-3628 bsc#1204868).
- commit 968feec</changelog>
  <changelog author="tiwai@suse.de" date="1667390402">- iommu/vt-d: Do not falsely log intel_iommu is unsupported
  kernel option (bsc#1204947).
- commit 440c18c</changelog>
  <changelog author="martin.wilck@suse.com" date="1667390403">- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- commit 0d14223</changelog>
  <changelog author="vkarasulli@suse.de" date="1667390404">- Update patch references to
  patches.suse/0001-floppy-disable-FDRAWCMD-by-default.patch
  (bsc#1200692 CVE-2022-33981).
- commit 913147c</changelog>
  <changelog author="msuchanek@suse.de" date="1667390405">- Refresh patches.suse/ppc64-kdump-Limit-kdump-base-to-512MB.patch
  to upstream version.
- commit 0f63234</changelog>
  <changelog author="tiwai@suse.de" date="1667476800">- ring-buffer: Check for NULL cpu_buffer in
  ring_buffer_wake_waiters() (bsc#1204705).
- commit 2e712ad</changelog>
  <changelog author="tiwai@suse.de" date="1667476801">- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
  (git-fixes).
- ALSA: usb-audio: make read-only array marker static const
  (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c
  (git-fixes).
- commit 7b36d72</changelog>
  <changelog author="tiwai@suse.de" date="1667476802">- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos
  (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-More-comprehensive-mixer-map-for-ASUS.patch.
- commit aad3dbe</changelog>
  <changelog author="tiwai@suse.de" date="1667476803">- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support
  (git-fixes).
- ALSA: scarlett2: Add support for the internal "standalone"
  switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections
  (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in
  scarlett2_usb() (git-fixes).
- commit 51a746f</changelog>
  <changelog author="tiwai@suse.de" date="1667476804">- ALSA: hiface: fix repeated words in comments (git-fixes).
- commit 1897e56</changelog>
  <changelog author="vbabka@suse.cz" date="1667476805">- Update kabi files. Refresh from Nov 2022 MU - 5.14.21-150400.24.28.1
- commit a5edbce</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1667476806">- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- commit 6f2ee60</changelog>
  <changelog author="tiwai@suse.de" date="1667563200">- blacklist.conf: add 8250_mtk entry that was reverted
- commit c43b30f</changelog>
  <changelog author="tiwai@suse.de" date="1667563201">- Move upstreamed BT fixes into sorted section
- commit 9cff1e2</changelog>
  <changelog author="tiwai@suse.de" date="1667563202">- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by
  l2cap_reassemble_sdu (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration
  (git-fixes).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- commit 9e67c0b</changelog>
  <changelog author="tiwai@suse.de" date="1667563203">- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- vsock: fix possible infinite sleep in
  vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg()
  (git-fixes).
- mISDN: fix possible memory leak in mISDN_register_device()
  (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame()
  (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in
  nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send()
  (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing
  the device (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or
  later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown
  (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being
  a V0.96 controller (git-fixes).
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into
  core (git-fixes).
- commit 356bf7e</changelog>
  <changelog author="tiwai@suse.de" date="1667563204">- x86/sev: Don't use cc_platform_has() for early SEV-SNP calls
  (bsc#1204970).
- x86/boot: Don't propagate uninitialized
  boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/compressed/64: Add identity mappings for setup_data entries
  (bsc#1204970).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Remove duplicated assignment to variable info
  (bsc#1204970).
- commit 1ad6c0c</changelog>
  <changelog author="tiwai@suse.de" date="1667563205">- Move upstreamed patches into sorted section
- commit 490afd7</changelog>
  <changelog author="tiwai@suse.de" date="1667649600">- arm64: entry: avoid kprobe recursion (git-fixes).
- Documentation: devres: add missing I2C helper (git-fixes).
- i2c: piix4: Fix adapter not be removed in piix4_remove()
  (git-fixes).
- efi/tpm: Pass correct address to memblock_reserve (git-fixes).
- arm64: dts: juno: Add thermal critical trip points (git-fixes).
- firmware: arm_scmi: Make Rx chan_setup fail on memory errors
  (git-fixes).
- firmware: arm_scmi: Suppress the driver's bind attributes
  (git-fixes).
- arm64: dts: ls208xa: specify clock frequencies for the MDIO
  controllers (git-fixes).
- arm64: dts: ls1088a: specify clock frequencies for the MDIO
  controllers (git-fixes).
- arm64: dts: lx2160a: specify clock frequencies for the MDIO
  controllers (git-fixes).
- dt-bindings: power: gpcv2: add power-domains property
  (git-fixes).
- arm64: dts: imx8: correct clock order (git-fixes).
- ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
  (git-fixes).
- commit 9fbcbe8</changelog>
</package>
<package pkgid="4673e3ae832f841252435cd348bc5b902171102b66dc04a1f8ed525b72ad996a" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.14.21.2"/>
  <changelog author="tiwai@suse.de" date="1667390400">- Drop Dell Dock regression fix patch again (bsc#1204719)
  It tunred out to be bogus, a different fix is needed
- commit 2c62bb9</changelog>
  <changelog author="tiwai@suse.de" date="1667390401">- wifi: brcmfmac: Fix potential buffer overflow in
  brcmf_fweh_event_worker() (CVE-2022-3628 bsc#1204868).
- commit 968feec</changelog>
  <changelog author="tiwai@suse.de" date="1667390402">- iommu/vt-d: Do not falsely log intel_iommu is unsupported
  kernel option (bsc#1204947).
- commit 440c18c</changelog>
  <changelog author="martin.wilck@suse.com" date="1667390403">- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- commit 0d14223</changelog>
  <changelog author="vkarasulli@suse.de" date="1667390404">- Update patch references to
  patches.suse/0001-floppy-disable-FDRAWCMD-by-default.patch
  (bsc#1200692 CVE-2022-33981).
- commit 913147c</changelog>
  <changelog author="msuchanek@suse.de" date="1667390405">- Refresh patches.suse/ppc64-kdump-Limit-kdump-base-to-512MB.patch
  to upstream version.
- commit 0f63234</changelog>
  <changelog author="tiwai@suse.de" date="1667476800">- ring-buffer: Check for NULL cpu_buffer in
  ring_buffer_wake_waiters() (bsc#1204705).
- commit 2e712ad</changelog>
  <changelog author="tiwai@suse.de" date="1667476801">- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
  (git-fixes).
- ALSA: usb-audio: make read-only array marker static const
  (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c
  (git-fixes).
- commit 7b36d72</changelog>
  <changelog author="tiwai@suse.de" date="1667476802">- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos
  (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-More-comprehensive-mixer-map-for-ASUS.patch.
- commit aad3dbe</changelog>
  <changelog author="tiwai@suse.de" date="1667476803">- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support
  (git-fixes).
- ALSA: scarlett2: Add support for the internal "standalone"
  switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections
  (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in
  scarlett2_usb() (git-fixes).
- commit 51a746f</changelog>
  <changelog author="tiwai@suse.de" date="1667476804">- ALSA: hiface: fix repeated words in comments (git-fixes).
- commit 1897e56</changelog>
  <changelog author="vbabka@suse.cz" date="1667476805">- Update kabi files. Refresh from Nov 2022 MU - 5.14.21-150400.24.28.1
- commit a5edbce</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1667476806">- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- commit 6f2ee60</changelog>
  <changelog author="tiwai@suse.de" date="1667563200">- blacklist.conf: add 8250_mtk entry that was reverted
- commit c43b30f</changelog>
  <changelog author="tiwai@suse.de" date="1667563201">- Move upstreamed BT fixes into sorted section
- commit 9cff1e2</changelog>
  <changelog author="tiwai@suse.de" date="1667563202">- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by
  l2cap_reassemble_sdu (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration
  (git-fixes).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- commit 9e67c0b</changelog>
  <changelog author="tiwai@suse.de" date="1667563203">- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- vsock: fix possible infinite sleep in
  vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg()
  (git-fixes).
- mISDN: fix possible memory leak in mISDN_register_device()
  (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame()
  (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in
  nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send()
  (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing
  the device (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or
  later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown
  (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being
  a V0.96 controller (git-fixes).
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into
  core (git-fixes).
- commit 356bf7e</changelog>
  <changelog author="tiwai@suse.de" date="1667563204">- x86/sev: Don't use cc_platform_has() for early SEV-SNP calls
  (bsc#1204970).
- x86/boot: Don't propagate uninitialized
  boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/compressed/64: Add identity mappings for setup_data entries
  (bsc#1204970).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Remove duplicated assignment to variable info
  (bsc#1204970).
- commit 1ad6c0c</changelog>
  <changelog author="tiwai@suse.de" date="1667563205">- Move upstreamed patches into sorted section
- commit 490afd7</changelog>
  <changelog author="tiwai@suse.de" date="1667649600">- arm64: entry: avoid kprobe recursion (git-fixes).
- Documentation: devres: add missing I2C helper (git-fixes).
- i2c: piix4: Fix adapter not be removed in piix4_remove()
  (git-fixes).
- efi/tpm: Pass correct address to memblock_reserve (git-fixes).
- arm64: dts: juno: Add thermal critical trip points (git-fixes).
- firmware: arm_scmi: Make Rx chan_setup fail on memory errors
  (git-fixes).
- firmware: arm_scmi: Suppress the driver's bind attributes
  (git-fixes).
- arm64: dts: ls208xa: specify clock frequencies for the MDIO
  controllers (git-fixes).
- arm64: dts: ls1088a: specify clock frequencies for the MDIO
  controllers (git-fixes).
- arm64: dts: lx2160a: specify clock frequencies for the MDIO
  controllers (git-fixes).
- dt-bindings: power: gpcv2: add power-domains property
  (git-fixes).
- arm64: dts: imx8: correct clock order (git-fixes).
- ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset
  (git-fixes).
- commit 9fbcbe8</changelog>
</package>
<package pkgid="fd1cbcd1826b1d3124a2c3c91587dd68ec0810e754899dad17498215b64726b2" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.14.28.1"/>
  <changelog author="fdmanana@suse.com" date="1670241600">- btrfs: send: use boolean types for current inode status
  (bsc#1206036).
- commit 36f86c0</changelog>
  <changelog author="fdmanana@suse.com" date="1670241601">- btrfs: send: fix failures when processing inodes with no links
  (bsc#1206036).
- commit f017ade</changelog>
  <changelog author="fdmanana@suse.com" date="1670241602">- btrfs: send: fix send failure of a subcase of orphan inodes
  (bsc#1206036).
- commit 90cbaac</changelog>
  <changelog author="fdmanana@suse.com" date="1670241603">- btrfs: fix processing of delayed data refs during backref
  walking (bsc#1206056).
- commit 2ec426f</changelog>
  <changelog author="fdmanana@suse.com" date="1670241604">- btrfs: fix processing of delayed tree block refs during backref
  walking (bsc#1206057).
- commit 83a8ed2</changelog>
  <changelog author="jgross@suse.com" date="1670414400">- xen/netback: Ensure protocol headers don't fall in the
  non-linear area (bsc#1206113, XSA-423, CVE-2022-3643).
- commit 6c8da66</changelog>
  <changelog author="jgross@suse.com" date="1670414401">- xen/netback: don't call kfree_skb() with interrupts disabled
  (bsc#1206114, XSA-424, CVE-2022-42328, CVE-2022-42329).
- commit 90098d3</changelog>
  <changelog author="jslaby@suse.cz" date="1670414402">- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon
  resume from S3 (bsc#1206037).
- commit 6215cd5</changelog>
  <changelog author="fdmanana@suse.com" date="1670414403">- btrfs: export a helper for compression hard check (bsc#1206149).
- commit f5cf2dc</changelog>
  <changelog author="fdmanana@suse.com" date="1670414404">- btrfs: do not allow compression on nodatacow files
  (bsc#1206149).
- commit 5167f62</changelog>
  <changelog author="fdmanana@suse.com" date="1670414405">- btrfs: check if root is readonly while setting security xattr
  (bsc#1206147).
- commit 50a73ba</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1670500800">- kbuild: Unify options for BTF generation for vmlinux and modules
  (bsc#1204693).
- Refresh patches.suse/kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch
- commit 5addeac</changelog>
  <changelog author="tiwai@suse.de" date="1670587200">- macsec: add missing attribute validation for offload
  (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in
  mdio_device_release() (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in
  get_l2cap_conn() (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
  (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator
  systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization
  (git-fixes).
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
  (git-fixes).
- nilfs2: fix NULL pointer dereference in
  nilfs_palloc_commit_free_entry() (git-fixes).
- commit a0e4929</changelog>
  <changelog author="tiwai@suse.de" date="1670587201">- selftests: rtnetlink: correct xfrm policy rule in
  kci_test_ipsec_offload (git-fixes).
- vmxnet3: use correct intrConf reference when using extended
  queues (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C
  strings (git-fixes).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- commit 3a866aa</changelog>
  <changelog author="tzimmermann@suse.de" date="1670587202">- Revert "drm/vc4: hvs: Reset muxes at probe time (git-fixes)." (bsc#1202341)
  This reverts commit 303122d0f2160411fa1068220bc59849d848550d.
  The reverted change clears hardware state on the RPi4, which leaves the
  screen blank. Without it, the display works correctly.
- commit 957f968</changelog>
  <changelog author="tiwai@suse.de" date="1670587203">- Update patch reference for proc fixes (CVE-2022-4378 bsc#1206207)
- commit cab6fa7</changelog>
  <changelog author="jdelvare@suse.de" date="1670587204">- Refresh
  patches.suse/fbdev-smscufx-Fix-use-after-free-in-ufx_ops_open.patch.
  Update metadata (Git-commit and Patch-mainline).
- commit 8f64db0</changelog>
  <changelog author="jdelvare@suse.de" date="1670587205">- fbdev: smscufx: Fix several use-after-free bugs (git-fixes).
- commit a097aee</changelog>
  <changelog author="lhenriques@suse.de" date="1670587206">- blacklist.conf: added 80019f113832 ("fuse: always initialize sb-&gt;s_fs_info")
- commit dda205a</changelog>
  <changelog author="lhenriques@suse.de" date="1670587207">- fuse: lock inode unconditionally in fuse_fallocate()
  (bsc#1206273).
- commit f576f6c</changelog>
</package>
<package pkgid="c3ce5c62c1d7d8df8b85062d0f6c8991cb8e607d30fd276c6e369c2d4b8976c7" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.14.28.1"/>
  <changelog author="fdmanana@suse.com" date="1670241600">- btrfs: send: use boolean types for current inode status
  (bsc#1206036).
- commit 36f86c0</changelog>
  <changelog author="fdmanana@suse.com" date="1670241601">- btrfs: send: fix failures when processing inodes with no links
  (bsc#1206036).
- commit f017ade</changelog>
  <changelog author="fdmanana@suse.com" date="1670241602">- btrfs: send: fix send failure of a subcase of orphan inodes
  (bsc#1206036).
- commit 90cbaac</changelog>
  <changelog author="fdmanana@suse.com" date="1670241603">- btrfs: fix processing of delayed data refs during backref
  walking (bsc#1206056).
- commit 2ec426f</changelog>
  <changelog author="fdmanana@suse.com" date="1670241604">- btrfs: fix processing of delayed tree block refs during backref
  walking (bsc#1206057).
- commit 83a8ed2</changelog>
  <changelog author="jgross@suse.com" date="1670414400">- xen/netback: Ensure protocol headers don't fall in the
  non-linear area (bsc#1206113, XSA-423, CVE-2022-3643).
- commit 6c8da66</changelog>
  <changelog author="jgross@suse.com" date="1670414401">- xen/netback: don't call kfree_skb() with interrupts disabled
  (bsc#1206114, XSA-424, CVE-2022-42328, CVE-2022-42329).
- commit 90098d3</changelog>
  <changelog author="jslaby@suse.cz" date="1670414402">- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon
  resume from S3 (bsc#1206037).
- commit 6215cd5</changelog>
  <changelog author="fdmanana@suse.com" date="1670414403">- btrfs: export a helper for compression hard check (bsc#1206149).
- commit f5cf2dc</changelog>
  <changelog author="fdmanana@suse.com" date="1670414404">- btrfs: do not allow compression on nodatacow files
  (bsc#1206149).
- commit 5167f62</changelog>
  <changelog author="fdmanana@suse.com" date="1670414405">- btrfs: check if root is readonly while setting security xattr
  (bsc#1206147).
- commit 50a73ba</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1670500800">- kbuild: Unify options for BTF generation for vmlinux and modules
  (bsc#1204693).
- Refresh patches.suse/kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch
- commit 5addeac</changelog>
  <changelog author="tiwai@suse.de" date="1670587200">- macsec: add missing attribute validation for offload
  (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in
  mdio_device_release() (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in
  get_l2cap_conn() (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
  (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator
  systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization
  (git-fixes).
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
  (git-fixes).
- nilfs2: fix NULL pointer dereference in
  nilfs_palloc_commit_free_entry() (git-fixes).
- commit a0e4929</changelog>
  <changelog author="tiwai@suse.de" date="1670587201">- selftests: rtnetlink: correct xfrm policy rule in
  kci_test_ipsec_offload (git-fixes).
- vmxnet3: use correct intrConf reference when using extended
  queues (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C
  strings (git-fixes).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- commit 3a866aa</changelog>
  <changelog author="tzimmermann@suse.de" date="1670587202">- Revert "drm/vc4: hvs: Reset muxes at probe time (git-fixes)." (bsc#1202341)
  This reverts commit 303122d0f2160411fa1068220bc59849d848550d.
  The reverted change clears hardware state on the RPi4, which leaves the
  screen blank. Without it, the display works correctly.
- commit 957f968</changelog>
  <changelog author="tiwai@suse.de" date="1670587203">- Update patch reference for proc fixes (CVE-2022-4378 bsc#1206207)
- commit cab6fa7</changelog>
  <changelog author="jdelvare@suse.de" date="1670587204">- Refresh
  patches.suse/fbdev-smscufx-Fix-use-after-free-in-ufx_ops_open.patch.
  Update metadata (Git-commit and Patch-mainline).
- commit 8f64db0</changelog>
  <changelog author="jdelvare@suse.de" date="1670587205">- fbdev: smscufx: Fix several use-after-free bugs (git-fixes).
- commit a097aee</changelog>
  <changelog author="lhenriques@suse.de" date="1670587206">- blacklist.conf: added 80019f113832 ("fuse: always initialize sb-&gt;s_fs_info")
- commit dda205a</changelog>
  <changelog author="lhenriques@suse.de" date="1670587207">- fuse: lock inode unconditionally in fuse_fallocate()
  (bsc#1206273).
- commit f576f6c</changelog>
</package>
<package pkgid="4cc05b3058344f93645e7e9befaafeb2fb3cf154b37cec94225cc8fe7562fbbe" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.14.31.1"/>
  <changelog author="tiwai@suse.de" date="1673265600">- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used
  (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- thermal: int340x: Add missing attribute for data rate base
  (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow
  (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property
  (git-fixes).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  (git-fixes).
- nfc: Fix potential resource leaks (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet
  (git-fixes).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe
  (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  (git-fixes).
- commit ac1915a</changelog>
  <changelog author="palcantara@suse.de" date="1673265601">- cifs: Fix kmap_local_page() unmapping (git-fixes).
- commit ff2c079</changelog>
  <changelog author="oneukum@suse.com" date="1673438400">- blacklist.conf: misattributed, we do not have this bug
- commit bc3473d</changelog>
  <changelog author="oneukum@suse.com" date="1673438401">- blacklist.conf: too risky
- commit 51ffe7a</changelog>
  <changelog author="oneukum@suse.com" date="1673438402">- blacklist.conf: misattributed
- commit ee5f25a</changelog>
  <changelog author="msuchanek@suse.de" date="1673438403">- powerpc: Take in account addition CPU node when building kexec
  FDT (bsc#1207016 ltc#201108).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- commit 4ca3eba</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673438404">- Refresh
  patches.suse/octeontx2-Move-devlink-registration-to-be-last-devli.patch.
  Added missing hunk in backport.
- commit 9b34e71</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673438405">- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- commit 32f938b</changelog>
  <changelog author="msuchanek@suse.de" date="1673438406">- ibmveth: Always stop tx queues during close (bsc#1065729).
- commit 11e0f4a</changelog>
  <changelog author="lduncan@suse.com" date="1673438407">- blacklist.conf: add two drbd git-fixes to ignore
- commit d03d927</changelog>
  <changelog author="oneukum@suse.com" date="1673438408">- Update
  patches.suse/dmaengine-idxd-Fix-crc_val-field-for-completion-reco.patch
  (bsc#1206554).
  Added bugzilla number
- commit 1fe5012</changelog>
  <changelog author="lduncan@suse.com" date="1673438409">- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free
  device/resource/connection (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: remove usage of list iterator variable after loop
  (git-fixes).
- commit 26591d7</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524800">- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online'
  and 'ret' (bsc#1205485).
- commit bac712b</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524801">- cpufreq: ACPI: Only set boost MSRs on supported CPUs
  (bsc#1205485).
- commit 2fc91f1</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524802">- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP
  mode (bsc#1201068).
- commit 15e54a9</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673524803">- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B
  header extraction support (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow
  (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
  (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly
  (jsc#SLE-24682).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC
  (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware
  (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count
  (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures
  (jsc#SLE-24682).
- octeontx2-af: Don't reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation
  (jsc#SLE-24682).
- commit a2de709</changelog>
  <changelog author="krisman@suse.de" date="1673524804">- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault
  path (performance bsc#1203219).
- commit 82bc0ed</changelog>
  <changelog author="oneukum@suse.com" date="1673611200">- media: stv0288: use explicitly signed char (git-fixes).
- commit 72af28b</changelog>
  <changelog author="tiwai@suse.de" date="1673611201">- nfc: pn533: Wait for out_urb's completion in
  pn533_usb_send_frame() (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude
  laptops (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit
  (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from
  podxt (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
  tablet (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses
  quirk (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
  (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF
  (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  (git-fixes).
- ima: Fix a potential NULL pointer access in
  ima_restore_measurement_list (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup
  (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook
  K3402ZA/K3502ZA (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/migrate: don't check the scratch page (git-fixes).
- commit 1d4442d</changelog>
  <changelog author="msuchanek@suse.de" date="1673611202">- powerpc/rtas: avoid scheduling in rtas_os_term() (bsc#1065729).
- powerpc/rtas: avoid device tree lookups in rtas_os_term()
  (bsc#1065729).
- commit 49b518d</changelog>
</package>
<package pkgid="2389f024b7b650bb3e45aec032789634ab41da40a57a77cfb80b6e8df1dcdf0e" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.14.31.1"/>
  <changelog author="tiwai@suse.de" date="1673265600">- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used
  (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- thermal: int340x: Add missing attribute for data rate base
  (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow
  (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property
  (git-fixes).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  (git-fixes).
- nfc: Fix potential resource leaks (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet
  (git-fixes).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe
  (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  (git-fixes).
- commit ac1915a</changelog>
  <changelog author="palcantara@suse.de" date="1673265601">- cifs: Fix kmap_local_page() unmapping (git-fixes).
- commit ff2c079</changelog>
  <changelog author="oneukum@suse.com" date="1673438400">- blacklist.conf: misattributed, we do not have this bug
- commit bc3473d</changelog>
  <changelog author="oneukum@suse.com" date="1673438401">- blacklist.conf: too risky
- commit 51ffe7a</changelog>
  <changelog author="oneukum@suse.com" date="1673438402">- blacklist.conf: misattributed
- commit ee5f25a</changelog>
  <changelog author="msuchanek@suse.de" date="1673438403">- powerpc: Take in account addition CPU node when building kexec
  FDT (bsc#1207016 ltc#201108).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- commit 4ca3eba</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673438404">- Refresh
  patches.suse/octeontx2-Move-devlink-registration-to-be-last-devli.patch.
  Added missing hunk in backport.
- commit 9b34e71</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673438405">- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- commit 32f938b</changelog>
  <changelog author="msuchanek@suse.de" date="1673438406">- ibmveth: Always stop tx queues during close (bsc#1065729).
- commit 11e0f4a</changelog>
  <changelog author="lduncan@suse.com" date="1673438407">- blacklist.conf: add two drbd git-fixes to ignore
- commit d03d927</changelog>
  <changelog author="oneukum@suse.com" date="1673438408">- Update
  patches.suse/dmaengine-idxd-Fix-crc_val-field-for-completion-reco.patch
  (bsc#1206554).
  Added bugzilla number
- commit 1fe5012</changelog>
  <changelog author="lduncan@suse.com" date="1673438409">- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free
  device/resource/connection (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: remove usage of list iterator variable after loop
  (git-fixes).
- commit 26591d7</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524800">- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online'
  and 'ret' (bsc#1205485).
- commit bac712b</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524801">- cpufreq: ACPI: Only set boost MSRs on supported CPUs
  (bsc#1205485).
- commit 2fc91f1</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524802">- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP
  mode (bsc#1201068).
- commit 15e54a9</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673524803">- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B
  header extraction support (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow
  (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
  (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly
  (jsc#SLE-24682).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC
  (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware
  (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count
  (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures
  (jsc#SLE-24682).
- octeontx2-af: Don't reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation
  (jsc#SLE-24682).
- commit a2de709</changelog>
  <changelog author="krisman@suse.de" date="1673524804">- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault
  path (performance bsc#1203219).
- commit 82bc0ed</changelog>
  <changelog author="oneukum@suse.com" date="1673611200">- media: stv0288: use explicitly signed char (git-fixes).
- commit 72af28b</changelog>
  <changelog author="tiwai@suse.de" date="1673611201">- nfc: pn533: Wait for out_urb's completion in
  pn533_usb_send_frame() (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude
  laptops (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit
  (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from
  podxt (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
  tablet (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses
  quirk (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
  (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF
  (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  (git-fixes).
- ima: Fix a potential NULL pointer access in
  ima_restore_measurement_list (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup
  (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook
  K3402ZA/K3502ZA (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/migrate: don't check the scratch page (git-fixes).
- commit 1d4442d</changelog>
  <changelog author="msuchanek@suse.de" date="1673611202">- powerpc/rtas: avoid scheduling in rtas_os_term() (bsc#1065729).
- powerpc/rtas: avoid device tree lookups in rtas_os_term()
  (bsc#1065729).
- commit 49b518d</changelog>
</package>
<package pkgid="f05b921a586ef2679ec92f414d69d0d4403ad5065b7af724c36941438de97e13" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.14.7.1"/>
  <changelog author="tiwai@suse.de" date="1657022400">- usbnet: fix memory allocation in helpers (git-fixes).
- virtio-net: fix race between ndo_open() and
  virtio_device_ready() (git-fixes).
- xhci-pci: Allow host runtime PM as default for Intel Meteor
  Lake xHCI (git-fixes).
- xhci-pci: Allow host runtime PM as default for Intel Raptor
  Lake xHCI (git-fixes).
- xhci: turn off port power in shutdown (git-fixes).
- virtio_net: fix xdp_rxq_info bug after suspend/resume
  (git-fixes).
- virtio_net: fix wrong buf address calculation when using xdp
  (git-fixes).
- commit bb6cd2d</changelog>
  <changelog author="tiwai@suse.de" date="1657022401">- netfilter: nf_tables: stricter validation of element data
  (CVE-2022-34918 bsc#1201171).
- commit 6821024</changelog>
  <changelog author="tiwai@suse.de" date="1657022402">- net: ipv6: unexport __init-annotated seg6_hmac_net_init()
  (bsc#1201218).
- tick/nohz: unexport __init-annotated tick_nohz_full_setup()
  (bsc#1201218).
- clocksource: hyper-v: unexport __init-annotated
  hv_init_clocksource() (bsc#1201218).
- xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
  (bsc#1201218).
- net: ipv6: unexport __init-annotated seg6_hmac_init()
  (bsc#1201218).
- net: xfrm: unexport __init-annotated xfrm4_protocol_init()
  (bsc#1201218).
- net: mdio: unexport __init-annotated mdio_bus_init()
  (bsc#1201218).
- commit f8aa8f6</changelog>
  <changelog author="tiwai@suse.de" date="1657022403">- kabi/severities: allow dropping a few invalid exported symbols (bsc#1201218)
- commit fb35701</changelog>
  <changelog author="jgross@suse.com" date="1657022404">- KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU ==
  this vCPU (git-fixes).
- Refresh
  patches.suse/KVM-nVMX-Ensure-vCPU-honors-event-request-if-posting.patch.
- commit cc9c0cb</changelog>
  <changelog author="jgross@suse.com" date="1657108800">- xen/blkfront: fix leaking data in shared pages (bsc#1200762,
  CVE-2022-26365, XSA-403).
- commit 5f3a98c</changelog>
  <changelog author="jgross@suse.com" date="1657108801">- xen/blkfront: force data bouncing when backend is untrusted
  (bsc#1200762, CVE-2022-33742, XSA-403).
- commit e887a75</changelog>
  <changelog author="jgross@suse.com" date="1657108802">- xen/netfront: fix leaking data in shared pages (bsc#1200762,
  CVE-2022-33740, XSA-403).
- commit d781d02</changelog>
  <changelog author="jgross@suse.com" date="1657108803">- xen/netfront: force data bouncing when backend is untrusted
  (bsc#1200762, CVE-2022-33741, XSA-403).
- commit 8573a2a</changelog>
  <changelog author="jgross@suse.com" date="1657108804">- xen-netfront: restore __skb_queue_tail() positioning in
  xennet_get_responses() (bsc#1200763, CVE-2022-33743, XSA-405).
- commit 3452cb8</changelog>
  <changelog author="tiwai@suse.de" date="1657108805">- Update patch reference for rose fix (CVE-2022-2318 bsc#1201251)
- commit 6740ddf</changelog>
  <changelog author="vbabka@suse.cz" date="1657195200">- mm/slub: add missing TID updates on slab deactivation
  (git-fixes).
- commit 2839b22</changelog>
  <changelog author="tabraham@suse.com" date="1657195201">- cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs
  (bsc#1201228).
- commit e9e6c6d</changelog>
  <changelog author="ohering@suse.de" date="1657281600">- README.BRANCH: update maintainer email address
- commit 0252c8a</changelog>
  <changelog author="aabdallah@suse.de" date="1657281601">- ibmvnic: Properly dispose of all skbs during a failover
  (bsc#1200925).
- commit c771c51</changelog>
  <changelog author="ohering@suse.de" date="1657281602">- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
  (bsc#1200845).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
  (bsc#1200845).
- commit e1e83aa</changelog>
  <changelog author="bp@suse.de" date="1657281603">- x86/bugs: Add Cannon lake to RETBleed affected CPU list
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 739eddd</changelog>
  <changelog author="bp@suse.de" date="1657281604">- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 3be5cfd</changelog>
  <changelog author="bp@suse.de" date="1657281605">- x86/kexec: Disable RET on kexec (bsc#1199657 CVE-2022-29900
  CVE-2022-29901).
- commit d1e1c13</changelog>
  <changelog author="neilb@suse.de" date="1657540800">- don't call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- commit 9689c47</changelog>
</package>
<package pkgid="32d1d2e327f318b5b3655fd90be363d5a8014668ad34df9f1cc40903218c0eee" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.14.7.1"/>
  <changelog author="tiwai@suse.de" date="1657022400">- usbnet: fix memory allocation in helpers (git-fixes).
- virtio-net: fix race between ndo_open() and
  virtio_device_ready() (git-fixes).
- xhci-pci: Allow host runtime PM as default for Intel Meteor
  Lake xHCI (git-fixes).
- xhci-pci: Allow host runtime PM as default for Intel Raptor
  Lake xHCI (git-fixes).
- xhci: turn off port power in shutdown (git-fixes).
- virtio_net: fix xdp_rxq_info bug after suspend/resume
  (git-fixes).
- virtio_net: fix wrong buf address calculation when using xdp
  (git-fixes).
- commit bb6cd2d</changelog>
  <changelog author="tiwai@suse.de" date="1657022401">- netfilter: nf_tables: stricter validation of element data
  (CVE-2022-34918 bsc#1201171).
- commit 6821024</changelog>
  <changelog author="tiwai@suse.de" date="1657022402">- net: ipv6: unexport __init-annotated seg6_hmac_net_init()
  (bsc#1201218).
- tick/nohz: unexport __init-annotated tick_nohz_full_setup()
  (bsc#1201218).
- clocksource: hyper-v: unexport __init-annotated
  hv_init_clocksource() (bsc#1201218).
- xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
  (bsc#1201218).
- net: ipv6: unexport __init-annotated seg6_hmac_init()
  (bsc#1201218).
- net: xfrm: unexport __init-annotated xfrm4_protocol_init()
  (bsc#1201218).
- net: mdio: unexport __init-annotated mdio_bus_init()
  (bsc#1201218).
- commit f8aa8f6</changelog>
  <changelog author="tiwai@suse.de" date="1657022403">- kabi/severities: allow dropping a few invalid exported symbols (bsc#1201218)
- commit fb35701</changelog>
  <changelog author="jgross@suse.com" date="1657022404">- KVM: VMX: Wake vCPU when delivering posted IRQ even if vCPU ==
  this vCPU (git-fixes).
- Refresh
  patches.suse/KVM-nVMX-Ensure-vCPU-honors-event-request-if-posting.patch.
- commit cc9c0cb</changelog>
  <changelog author="jgross@suse.com" date="1657108800">- xen/blkfront: fix leaking data in shared pages (bsc#1200762,
  CVE-2022-26365, XSA-403).
- commit 5f3a98c</changelog>
  <changelog author="jgross@suse.com" date="1657108801">- xen/blkfront: force data bouncing when backend is untrusted
  (bsc#1200762, CVE-2022-33742, XSA-403).
- commit e887a75</changelog>
  <changelog author="jgross@suse.com" date="1657108802">- xen/netfront: fix leaking data in shared pages (bsc#1200762,
  CVE-2022-33740, XSA-403).
- commit d781d02</changelog>
  <changelog author="jgross@suse.com" date="1657108803">- xen/netfront: force data bouncing when backend is untrusted
  (bsc#1200762, CVE-2022-33741, XSA-403).
- commit 8573a2a</changelog>
  <changelog author="jgross@suse.com" date="1657108804">- xen-netfront: restore __skb_queue_tail() positioning in
  xennet_get_responses() (bsc#1200763, CVE-2022-33743, XSA-405).
- commit 3452cb8</changelog>
  <changelog author="tiwai@suse.de" date="1657108805">- Update patch reference for rose fix (CVE-2022-2318 bsc#1201251)
- commit 6740ddf</changelog>
  <changelog author="vbabka@suse.cz" date="1657195200">- mm/slub: add missing TID updates on slab deactivation
  (git-fixes).
- commit 2839b22</changelog>
  <changelog author="tabraham@suse.com" date="1657195201">- cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs
  (bsc#1201228).
- commit e9e6c6d</changelog>
  <changelog author="ohering@suse.de" date="1657281600">- README.BRANCH: update maintainer email address
- commit 0252c8a</changelog>
  <changelog author="aabdallah@suse.de" date="1657281601">- ibmvnic: Properly dispose of all skbs during a failover
  (bsc#1200925).
- commit c771c51</changelog>
  <changelog author="ohering@suse.de" date="1657281602">- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
  (bsc#1200845).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
  (bsc#1200845).
- commit e1e83aa</changelog>
  <changelog author="bp@suse.de" date="1657281603">- x86/bugs: Add Cannon lake to RETBleed affected CPU list
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 739eddd</changelog>
  <changelog author="bp@suse.de" date="1657281604">- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 3be5cfd</changelog>
  <changelog author="bp@suse.de" date="1657281605">- x86/kexec: Disable RET on kexec (bsc#1199657 CVE-2022-29900
  CVE-2022-29901).
- commit d1e1c13</changelog>
  <changelog author="neilb@suse.de" date="1657540800">- don't call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- commit 9689c47</changelog>
</package>
<package pkgid="71c17f62720e61c61abfdbd9b8b9f91b1bcc29050114c42e61c4b0a5d06012bd" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.11.1"/>
  <changelog author="aabdallah@suse.de" date="1657281600">- ibmvnic: Properly dispose of all skbs during a failover
  (bsc#1200925).
- commit c771c51</changelog>
  <changelog author="ohering@suse.de" date="1657281601">- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
  (bsc#1200845).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
  (bsc#1200845).
- commit e1e83aa</changelog>
  <changelog author="bp@suse.de" date="1657281602">- x86/bugs: Add Cannon lake to RETBleed affected CPU list
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 739eddd</changelog>
  <changelog author="bp@suse.de" date="1657281603">- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 3be5cfd</changelog>
  <changelog author="bp@suse.de" date="1657281604">- x86/kexec: Disable RET on kexec (bsc#1199657 CVE-2022-29900
  CVE-2022-29901).
- commit d1e1c13</changelog>
  <changelog author="neilb@suse.de" date="1657540800">- don't call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- commit 9689c47</changelog>
  <changelog author="lduncan@suse.com" date="1657540801">- kABI: fix removal of iscsi_destroy_conn (bsc#1198410).
- kABI: fix change of iscsi_host_remove() arguments (bsc#1198410).
- scsi: iscsi: Fix session removal on shutdown (bsc#1198410).
- scsi: qedi: Use QEDI_MODE_NORMAL for error handling
  (bsc#1198410).
- scsi: iscsi: Add helper to remove a session from the kernel
  (bsc#1198410).
- scsi: iscsi: Clean up bound endpoints during shutdown
  (bsc#1198410).
- scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel
  (bsc#1198410).
- scsi: iscsi: Fix HW conn removal use after free (bsc#1198410).
- scsi: libiscsi: Teardown iscsi_cls_conn gracefully
  (bsc#1198410).
- scsi: iscsi: Add helper functions to manage iscsi_cls_conn
  (bsc#1198410).
- commit 3d68d7d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713600">- net: dpaa_eth: remove dead select in menuconfig FSL_DPAA_ETH (git-fixes).
- commit 5dea61c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713601">- can: rcar_canfd: add __maybe_unused annotation to silence warning (git-fixes).
- commit 3436390</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713602">- net: dsa: be compatible with masters which unregister on shutdown (git-fixes).
- commit 185c5a1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713603">- net: dsa: hellcreek: be compatible with masters which unregister on shutdown (git-fixes).
- commit b13c76a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713604">- net: dsa: microchip: ksz8863: be compatible with masters which unregister on shutdown (git-fixes).
- commit 8df6c27</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713605">- net: dsa: xrs700x: be compatible with masters which unregister on shutdown (git-fixes).
- commit 067f613</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713606">- octeontx2-af: Add a 'rvu_free_bitmap()' function (gix-fixes).
- commit bc0ad1c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713607">- octeontx2-af: Fix some memory leaks in the error handling path
  of 'cgx_lmac_init()' (git-fixes).
- commit 771ed28</changelog>
  <changelog author="jslaby@suse.cz" date="1657800000">- tty: use new tty_insert_flip_string_and_push_buffer() in
  pty_write() (bsc#1198829 CVE-2022-1462).
- tty: extract tty_flip_buffer_commit() from
  tty_flip_buffer_push() (bsc#1198829 CVE-2022-1462).
- commit decd358</changelog>
  <changelog author="jeffm@suse.com" date="1657800001">- rpm/kernel-binary.spec.in: Require dwarves &gt;= 1.22 on SLE15-SP3 or newer
  Dwarves 1.22 or newer is required to build kernels with BTF information
  embedded in modules.
- commit ee19e9d</changelog>
  <changelog author="jgross@suse.com" date="1657886400">- xen/netback: avoid entering xenvif_rx_next_skb() with an empty
  rx queue (bsc#1201381).
- commit bf00db7</changelog>
  <changelog author="bp@suse.de" date="1657886401">- x86/entry: Remove skip_r11rcx (bsc#1201524).
- Refresh
  patches.suse/x86-entry-Add-kernel-IBRS-implementation.patch.
- commit 64980c7</changelog>
  <changelog author="bp@suse.de" date="1657886402">- x86/ibt,xen: Sprinkle the ENDBR (bsc#1201471).
- Refresh patches.suse/objtool-Update-Retpoline-validation.patch.
- commit cf7f7e0</changelog>
</package>
<package pkgid="11f81f3c01a5f5d0a39efe453f4c43776bc0cbeaccdf918e700596d66dcd3890" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.24.11.1"/>
  <changelog author="aabdallah@suse.de" date="1657281600">- ibmvnic: Properly dispose of all skbs during a failover
  (bsc#1200925).
- commit c771c51</changelog>
  <changelog author="ohering@suse.de" date="1657281601">- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
  (bsc#1200845).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
  (bsc#1200845).
- commit e1e83aa</changelog>
  <changelog author="bp@suse.de" date="1657281602">- x86/bugs: Add Cannon lake to RETBleed affected CPU list
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 739eddd</changelog>
  <changelog author="bp@suse.de" date="1657281603">- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 3be5cfd</changelog>
  <changelog author="bp@suse.de" date="1657281604">- x86/kexec: Disable RET on kexec (bsc#1199657 CVE-2022-29900
  CVE-2022-29901).
- commit d1e1c13</changelog>
  <changelog author="neilb@suse.de" date="1657540800">- don't call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- commit 9689c47</changelog>
  <changelog author="lduncan@suse.com" date="1657540801">- kABI: fix removal of iscsi_destroy_conn (bsc#1198410).
- kABI: fix change of iscsi_host_remove() arguments (bsc#1198410).
- scsi: iscsi: Fix session removal on shutdown (bsc#1198410).
- scsi: qedi: Use QEDI_MODE_NORMAL for error handling
  (bsc#1198410).
- scsi: iscsi: Add helper to remove a session from the kernel
  (bsc#1198410).
- scsi: iscsi: Clean up bound endpoints during shutdown
  (bsc#1198410).
- scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel
  (bsc#1198410).
- scsi: iscsi: Fix HW conn removal use after free (bsc#1198410).
- scsi: libiscsi: Teardown iscsi_cls_conn gracefully
  (bsc#1198410).
- scsi: iscsi: Add helper functions to manage iscsi_cls_conn
  (bsc#1198410).
- commit 3d68d7d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713600">- net: dpaa_eth: remove dead select in menuconfig FSL_DPAA_ETH (git-fixes).
- commit 5dea61c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713601">- can: rcar_canfd: add __maybe_unused annotation to silence warning (git-fixes).
- commit 3436390</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713602">- net: dsa: be compatible with masters which unregister on shutdown (git-fixes).
- commit 185c5a1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713603">- net: dsa: hellcreek: be compatible with masters which unregister on shutdown (git-fixes).
- commit b13c76a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713604">- net: dsa: microchip: ksz8863: be compatible with masters which unregister on shutdown (git-fixes).
- commit 8df6c27</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713605">- net: dsa: xrs700x: be compatible with masters which unregister on shutdown (git-fixes).
- commit 067f613</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713606">- octeontx2-af: Add a 'rvu_free_bitmap()' function (gix-fixes).
- commit bc0ad1c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713607">- octeontx2-af: Fix some memory leaks in the error handling path
  of 'cgx_lmac_init()' (git-fixes).
- commit 771ed28</changelog>
  <changelog author="jslaby@suse.cz" date="1657800000">- tty: use new tty_insert_flip_string_and_push_buffer() in
  pty_write() (bsc#1198829 CVE-2022-1462).
- tty: extract tty_flip_buffer_commit() from
  tty_flip_buffer_push() (bsc#1198829 CVE-2022-1462).
- commit decd358</changelog>
  <changelog author="jeffm@suse.com" date="1657800001">- rpm/kernel-binary.spec.in: Require dwarves &gt;= 1.22 on SLE15-SP3 or newer
  Dwarves 1.22 or newer is required to build kernels with BTF information
  embedded in modules.
- commit ee19e9d</changelog>
  <changelog author="jgross@suse.com" date="1657886400">- xen/netback: avoid entering xenvif_rx_next_skb() with an empty
  rx queue (bsc#1201381).
- commit bf00db7</changelog>
  <changelog author="bp@suse.de" date="1657886401">- x86/entry: Remove skip_r11rcx (bsc#1201524).
- Refresh
  patches.suse/x86-entry-Add-kernel-IBRS-implementation.patch.
- commit 64980c7</changelog>
  <changelog author="bp@suse.de" date="1657886402">- x86/ibt,xen: Sprinkle the ENDBR (bsc#1201471).
- Refresh patches.suse/objtool-Update-Retpoline-validation.patch.
- commit cf7f7e0</changelog>
</package>
<package pkgid="83a904db616d5f43ba4fe1ea00fa05cfe9e210280230c002f6cd13859deeec85" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.11.1"/>
  <changelog author="aabdallah@suse.de" date="1657281600">- ibmvnic: Properly dispose of all skbs during a failover
  (bsc#1200925).
- commit c771c51</changelog>
  <changelog author="ohering@suse.de" date="1657281601">- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
  (bsc#1200845).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
  (bsc#1200845).
- commit e1e83aa</changelog>
  <changelog author="bp@suse.de" date="1657281602">- x86/bugs: Add Cannon lake to RETBleed affected CPU list
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 739eddd</changelog>
  <changelog author="bp@suse.de" date="1657281603">- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 3be5cfd</changelog>
  <changelog author="bp@suse.de" date="1657281604">- x86/kexec: Disable RET on kexec (bsc#1199657 CVE-2022-29900
  CVE-2022-29901).
- commit d1e1c13</changelog>
  <changelog author="neilb@suse.de" date="1657540800">- don't call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- commit 9689c47</changelog>
  <changelog author="lduncan@suse.com" date="1657540801">- kABI: fix removal of iscsi_destroy_conn (bsc#1198410).
- kABI: fix change of iscsi_host_remove() arguments (bsc#1198410).
- scsi: iscsi: Fix session removal on shutdown (bsc#1198410).
- scsi: qedi: Use QEDI_MODE_NORMAL for error handling
  (bsc#1198410).
- scsi: iscsi: Add helper to remove a session from the kernel
  (bsc#1198410).
- scsi: iscsi: Clean up bound endpoints during shutdown
  (bsc#1198410).
- scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel
  (bsc#1198410).
- scsi: iscsi: Fix HW conn removal use after free (bsc#1198410).
- scsi: libiscsi: Teardown iscsi_cls_conn gracefully
  (bsc#1198410).
- scsi: iscsi: Add helper functions to manage iscsi_cls_conn
  (bsc#1198410).
- commit 3d68d7d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713600">- net: dpaa_eth: remove dead select in menuconfig FSL_DPAA_ETH (git-fixes).
- commit 5dea61c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713601">- can: rcar_canfd: add __maybe_unused annotation to silence warning (git-fixes).
- commit 3436390</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713602">- net: dsa: be compatible with masters which unregister on shutdown (git-fixes).
- commit 185c5a1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713603">- net: dsa: hellcreek: be compatible with masters which unregister on shutdown (git-fixes).
- commit b13c76a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713604">- net: dsa: microchip: ksz8863: be compatible with masters which unregister on shutdown (git-fixes).
- commit 8df6c27</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713605">- net: dsa: xrs700x: be compatible with masters which unregister on shutdown (git-fixes).
- commit 067f613</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713606">- octeontx2-af: Add a 'rvu_free_bitmap()' function (gix-fixes).
- commit bc0ad1c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713607">- octeontx2-af: Fix some memory leaks in the error handling path
  of 'cgx_lmac_init()' (git-fixes).
- commit 771ed28</changelog>
  <changelog author="jslaby@suse.cz" date="1657800000">- tty: use new tty_insert_flip_string_and_push_buffer() in
  pty_write() (bsc#1198829 CVE-2022-1462).
- tty: extract tty_flip_buffer_commit() from
  tty_flip_buffer_push() (bsc#1198829 CVE-2022-1462).
- commit decd358</changelog>
  <changelog author="jeffm@suse.com" date="1657800001">- rpm/kernel-binary.spec.in: Require dwarves &gt;= 1.22 on SLE15-SP3 or newer
  Dwarves 1.22 or newer is required to build kernels with BTF information
  embedded in modules.
- commit ee19e9d</changelog>
  <changelog author="jgross@suse.com" date="1657886400">- xen/netback: avoid entering xenvif_rx_next_skb() with an empty
  rx queue (bsc#1201381).
- commit bf00db7</changelog>
  <changelog author="bp@suse.de" date="1657886401">- x86/entry: Remove skip_r11rcx (bsc#1201524).
- Refresh
  patches.suse/x86-entry-Add-kernel-IBRS-implementation.patch.
- commit 64980c7</changelog>
  <changelog author="bp@suse.de" date="1657886402">- x86/ibt,xen: Sprinkle the ENDBR (bsc#1201471).
- Refresh patches.suse/objtool-Update-Retpoline-validation.patch.
- commit cf7f7e0</changelog>
</package>
<package pkgid="30f6b15880c8d9b5897ce5bbd86205c2b8f39403f47449c44b30f53b857d54f1" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.11.1"/>
  <changelog author="aabdallah@suse.de" date="1657281600">- ibmvnic: Properly dispose of all skbs during a failover
  (bsc#1200925).
- commit c771c51</changelog>
  <changelog author="ohering@suse.de" date="1657281601">- PCI: hv: Fix interrupt mapping for multi-MSI (bsc#1200845).
- PCI: hv: Reuse existing IRTE allocation in compose_msi_msg()
  (bsc#1200845).
- PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (bsc#1200845).
- PCI: hv: Fix multi-MSI to allow more than one MSI vector
  (bsc#1200845).
- commit e1e83aa</changelog>
  <changelog author="bp@suse.de" date="1657281602">- x86/bugs: Add Cannon lake to RETBleed affected CPU list
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 739eddd</changelog>
  <changelog author="bp@suse.de" date="1657281603">- x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported
  (bsc#1199657 CVE-2022-29900 CVE-2022-29901).
- commit 3be5cfd</changelog>
  <changelog author="bp@suse.de" date="1657281604">- x86/kexec: Disable RET on kexec (bsc#1199657 CVE-2022-29900
  CVE-2022-29901).
- commit d1e1c13</changelog>
  <changelog author="neilb@suse.de" date="1657540800">- don't call utsname() after -&gt;nsproxy is NULL (bsc#1201196).
- commit 9689c47</changelog>
  <changelog author="lduncan@suse.com" date="1657540801">- kABI: fix removal of iscsi_destroy_conn (bsc#1198410).
- kABI: fix change of iscsi_host_remove() arguments (bsc#1198410).
- scsi: iscsi: Fix session removal on shutdown (bsc#1198410).
- scsi: qedi: Use QEDI_MODE_NORMAL for error handling
  (bsc#1198410).
- scsi: iscsi: Add helper to remove a session from the kernel
  (bsc#1198410).
- scsi: iscsi: Clean up bound endpoints during shutdown
  (bsc#1198410).
- scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel
  (bsc#1198410).
- scsi: iscsi: Fix HW conn removal use after free (bsc#1198410).
- scsi: libiscsi: Teardown iscsi_cls_conn gracefully
  (bsc#1198410).
- scsi: iscsi: Add helper functions to manage iscsi_cls_conn
  (bsc#1198410).
- commit 3d68d7d</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713600">- net: dpaa_eth: remove dead select in menuconfig FSL_DPAA_ETH (git-fixes).
- commit 5dea61c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713601">- can: rcar_canfd: add __maybe_unused annotation to silence warning (git-fixes).
- commit 3436390</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713602">- net: dsa: be compatible with masters which unregister on shutdown (git-fixes).
- commit 185c5a1</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713603">- net: dsa: hellcreek: be compatible with masters which unregister on shutdown (git-fixes).
- commit b13c76a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713604">- net: dsa: microchip: ksz8863: be compatible with masters which unregister on shutdown (git-fixes).
- commit 8df6c27</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713605">- net: dsa: xrs700x: be compatible with masters which unregister on shutdown (git-fixes).
- commit 067f613</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713606">- octeontx2-af: Add a 'rvu_free_bitmap()' function (gix-fixes).
- commit bc0ad1c</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1657713607">- octeontx2-af: Fix some memory leaks in the error handling path
  of 'cgx_lmac_init()' (git-fixes).
- commit 771ed28</changelog>
  <changelog author="jslaby@suse.cz" date="1657800000">- tty: use new tty_insert_flip_string_and_push_buffer() in
  pty_write() (bsc#1198829 CVE-2022-1462).
- tty: extract tty_flip_buffer_commit() from
  tty_flip_buffer_push() (bsc#1198829 CVE-2022-1462).
- commit decd358</changelog>
  <changelog author="jeffm@suse.com" date="1657800001">- rpm/kernel-binary.spec.in: Require dwarves &gt;= 1.22 on SLE15-SP3 or newer
  Dwarves 1.22 or newer is required to build kernels with BTF information
  embedded in modules.
- commit ee19e9d</changelog>
  <changelog author="jgross@suse.com" date="1657886400">- xen/netback: avoid entering xenvif_rx_next_skb() with an empty
  rx queue (bsc#1201381).
- commit bf00db7</changelog>
  <changelog author="bp@suse.de" date="1657886401">- x86/entry: Remove skip_r11rcx (bsc#1201524).
- Refresh
  patches.suse/x86-entry-Add-kernel-IBRS-implementation.patch.
- commit 64980c7</changelog>
  <changelog author="bp@suse.de" date="1657886402">- x86/ibt,xen: Sprinkle the ENDBR (bsc#1201471).
- Refresh patches.suse/objtool-Update-Retpoline-validation.patch.
- commit cf7f7e0</changelog>
</package>
<package pkgid="61c78f1468f8efddc145d2cfbb45b0317e977438f20f97f3f50d2ca9cf00ce8f" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.18.1"/>
  <changelog author="lhenriques@suse.de" date="1658750400">- blacklist.conf: add commit 7acae6183cf3
  I blacklisted the wrong commit: instead of adding 7acae6183cf3, I added the
  commit that introduced the bug fixed by it (which isn't present in SLE15-SP4).
- commit 8ec5489</changelog>
  <changelog author="ohering@suse.de" date="1658836800">- VMCI: Release notification_bitmap in error path (bsc#1199291,
  jsc#SLE-24635).
- VMCI: Check exclusive_vectors when freeing interrupt 1
  (bsc#1199291, jsc#SLE-24635).
- VMCI: Fix some error handling paths in vmci_guest_probe_device()
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams receive
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams sends (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: allocate send and receive buffers for DMA
  datagrams (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: register dummy IRQ handlers for DMA datagrams
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: set OS page size (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: detect DMA datagram capability (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: add MMIO access to registers (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: whitespace formatting change for vmci register
  defines (bsc#1199291, jsc#SLE-24635).
- commit 0e13b0d</changelog>
  <changelog author="ohering@suse.com" date="1658836801">- VMCI: Add support for ARM64 (bsc#1199291, jsc#SLE-24635).
- commit 91f9b43</changelog>
  <changelog author="mgorman@suse.de" date="1658836802">- page_alloc: fix invalid watemark check on a negative value
  (git fixes (mm/pgalloc)).
- commit 11d19f6</changelog>
  <changelog author="msuchanek@suse.de" date="1658836803">- powerpc/pseries/mobility: set NMI watchdog factor during an LPM
  (bsc#1201846 ltc#198761).
- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846
  ltc#198761).
- watchdog: export lockup_detector_reconfigure (bsc#1201846
  ltc#198761).
- powerpc/mobility: wait for memory transfer to complete
  (bsc#1201846 ltc#198761).
- commit 4c3e250</changelog>
  <changelog author="oneukum@suse.com" date="1658923200">- Bluetooth: btusb: Add the new support IDs for WCN6855
  (git-fixxes).
- Refresh
  patches.suse/Bluetooth-btusb-Add-one-more-Bluetooth-part-for-WCN6.patch.
- commit 91ad5ba</changelog>
  <changelog author="oneukum@suse.com" date="1658923201">- random: document add_hwgenerator_randomness() with other input
  functions (git-fixes).
- commit 0fb6e8a</changelog>
  <changelog author="oneukum@suse.com" date="1658923202">- blacklist.conf: breaks kABI for a cleanup
- commit 678666e</changelog>
  <changelog author="oneukum@suse.com" date="1658923203">- random: fix typo in comments (git-fixes).
- commit 6de6114</changelog>
  <changelog author="oneukum@suse.com" date="1658923204">- blacklist.conf: duplicate
- commit 1c70642</changelog>
  <changelog author="oneukum@suse.com" date="1658923205">- tee: fix put order in teedev_close_context() (git-fixes).
- commit 1650ec3</changelog>
  <changelog author="oneukum@suse.com" date="1658923206">- blacklist.conf: This is a cleanup, not fixing any bug
- commit 6f050ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1658923207">- net/sched: cls_u32: fix netns refcount changes in u32_change()
  (CVE-2022-29581 bsc#1199665).
- commit 6f81977</changelog>
  <changelog author="bp@suse.de" date="1659182400">- kvm/emulate: Fix SETcc emulation function offsets with SLS
  (bsc#1201930).
- Refresh
  patches.suse/x86-kvm-Fix-SETcc-emulation-for-return-thunks.patch.
- commit 154606a</changelog>
  <changelog author="bp@suse.de" date="1659182401">- KVM: emulate: do not adjust size of fastop and setcc subroutines
  (bsc#1201930).
- commit 935d297</changelog>
  <changelog author="mgorman@suse.de" date="1659441600">- sched/core: Do not requeue task on CPU excluded from cpus_mask
  (bnc#1199356).
- commit f226af5</changelog>
  <changelog author="bp@suse.de" date="1659528000">- x86/speculation: Add RSB VM Exit protections (bsc#1201726
  CVE-2022-26373).
- commit 87cc728</changelog>
  <changelog author="bp@suse.de" date="1659528001">- x86/speculation: Add LFENCE to RSB fill sequence (bsc#1201726
  CVE-2022-26373).
- commit e9f7bfc</changelog>
  <changelog author="fweisbecker@suse.de" date="1659614400">- posix-cpu-timers: Cleanup CPU timers before freeing them during exec (CVE-2022-2585 bsc#1202094).
- commit 2decf97</changelog>
  <changelog author="tiwai@suse.de" date="1659614401">- fix race between exit_itimers() and /proc/pid/timers
  (git-fixes).
- commit 62d2eea</changelog>
</package>
<package pkgid="938208864dfc59206766be251b6e0234d741e5b2ef643926a4ead649826bd3be" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.24.18.1"/>
  <changelog author="lhenriques@suse.de" date="1658750400">- blacklist.conf: add commit 7acae6183cf3
  I blacklisted the wrong commit: instead of adding 7acae6183cf3, I added the
  commit that introduced the bug fixed by it (which isn't present in SLE15-SP4).
- commit 8ec5489</changelog>
  <changelog author="ohering@suse.de" date="1658836800">- VMCI: Release notification_bitmap in error path (bsc#1199291,
  jsc#SLE-24635).
- VMCI: Check exclusive_vectors when freeing interrupt 1
  (bsc#1199291, jsc#SLE-24635).
- VMCI: Fix some error handling paths in vmci_guest_probe_device()
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams receive
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams sends (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: allocate send and receive buffers for DMA
  datagrams (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: register dummy IRQ handlers for DMA datagrams
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: set OS page size (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: detect DMA datagram capability (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: add MMIO access to registers (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: whitespace formatting change for vmci register
  defines (bsc#1199291, jsc#SLE-24635).
- commit 0e13b0d</changelog>
  <changelog author="ohering@suse.com" date="1658836801">- VMCI: Add support for ARM64 (bsc#1199291, jsc#SLE-24635).
- commit 91f9b43</changelog>
  <changelog author="mgorman@suse.de" date="1658836802">- page_alloc: fix invalid watemark check on a negative value
  (git fixes (mm/pgalloc)).
- commit 11d19f6</changelog>
  <changelog author="msuchanek@suse.de" date="1658836803">- powerpc/pseries/mobility: set NMI watchdog factor during an LPM
  (bsc#1201846 ltc#198761).
- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846
  ltc#198761).
- watchdog: export lockup_detector_reconfigure (bsc#1201846
  ltc#198761).
- powerpc/mobility: wait for memory transfer to complete
  (bsc#1201846 ltc#198761).
- commit 4c3e250</changelog>
  <changelog author="oneukum@suse.com" date="1658923200">- Bluetooth: btusb: Add the new support IDs for WCN6855
  (git-fixxes).
- Refresh
  patches.suse/Bluetooth-btusb-Add-one-more-Bluetooth-part-for-WCN6.patch.
- commit 91ad5ba</changelog>
  <changelog author="oneukum@suse.com" date="1658923201">- random: document add_hwgenerator_randomness() with other input
  functions (git-fixes).
- commit 0fb6e8a</changelog>
  <changelog author="oneukum@suse.com" date="1658923202">- blacklist.conf: breaks kABI for a cleanup
- commit 678666e</changelog>
  <changelog author="oneukum@suse.com" date="1658923203">- random: fix typo in comments (git-fixes).
- commit 6de6114</changelog>
  <changelog author="oneukum@suse.com" date="1658923204">- blacklist.conf: duplicate
- commit 1c70642</changelog>
  <changelog author="oneukum@suse.com" date="1658923205">- tee: fix put order in teedev_close_context() (git-fixes).
- commit 1650ec3</changelog>
  <changelog author="oneukum@suse.com" date="1658923206">- blacklist.conf: This is a cleanup, not fixing any bug
- commit 6f050ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1658923207">- net/sched: cls_u32: fix netns refcount changes in u32_change()
  (CVE-2022-29581 bsc#1199665).
- commit 6f81977</changelog>
  <changelog author="bp@suse.de" date="1659182400">- kvm/emulate: Fix SETcc emulation function offsets with SLS
  (bsc#1201930).
- Refresh
  patches.suse/x86-kvm-Fix-SETcc-emulation-for-return-thunks.patch.
- commit 154606a</changelog>
  <changelog author="bp@suse.de" date="1659182401">- KVM: emulate: do not adjust size of fastop and setcc subroutines
  (bsc#1201930).
- commit 935d297</changelog>
  <changelog author="mgorman@suse.de" date="1659441600">- sched/core: Do not requeue task on CPU excluded from cpus_mask
  (bnc#1199356).
- commit f226af5</changelog>
  <changelog author="bp@suse.de" date="1659528000">- x86/speculation: Add RSB VM Exit protections (bsc#1201726
  CVE-2022-26373).
- commit 87cc728</changelog>
  <changelog author="bp@suse.de" date="1659528001">- x86/speculation: Add LFENCE to RSB fill sequence (bsc#1201726
  CVE-2022-26373).
- commit e9f7bfc</changelog>
  <changelog author="fweisbecker@suse.de" date="1659614400">- posix-cpu-timers: Cleanup CPU timers before freeing them during exec (CVE-2022-2585 bsc#1202094).
- commit 2decf97</changelog>
  <changelog author="tiwai@suse.de" date="1659614401">- fix race between exit_itimers() and /proc/pid/timers
  (git-fixes).
- commit 62d2eea</changelog>
</package>
<package pkgid="273fc73ecbc81867fecd463ae457273e8bf7ed5ede756a813a95b69d14882837" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.18.1"/>
  <changelog author="lhenriques@suse.de" date="1658750400">- blacklist.conf: add commit 7acae6183cf3
  I blacklisted the wrong commit: instead of adding 7acae6183cf3, I added the
  commit that introduced the bug fixed by it (which isn't present in SLE15-SP4).
- commit 8ec5489</changelog>
  <changelog author="ohering@suse.de" date="1658836800">- VMCI: Release notification_bitmap in error path (bsc#1199291,
  jsc#SLE-24635).
- VMCI: Check exclusive_vectors when freeing interrupt 1
  (bsc#1199291, jsc#SLE-24635).
- VMCI: Fix some error handling paths in vmci_guest_probe_device()
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams receive
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams sends (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: allocate send and receive buffers for DMA
  datagrams (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: register dummy IRQ handlers for DMA datagrams
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: set OS page size (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: detect DMA datagram capability (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: add MMIO access to registers (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: whitespace formatting change for vmci register
  defines (bsc#1199291, jsc#SLE-24635).
- commit 0e13b0d</changelog>
  <changelog author="ohering@suse.com" date="1658836801">- VMCI: Add support for ARM64 (bsc#1199291, jsc#SLE-24635).
- commit 91f9b43</changelog>
  <changelog author="mgorman@suse.de" date="1658836802">- page_alloc: fix invalid watemark check on a negative value
  (git fixes (mm/pgalloc)).
- commit 11d19f6</changelog>
  <changelog author="msuchanek@suse.de" date="1658836803">- powerpc/pseries/mobility: set NMI watchdog factor during an LPM
  (bsc#1201846 ltc#198761).
- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846
  ltc#198761).
- watchdog: export lockup_detector_reconfigure (bsc#1201846
  ltc#198761).
- powerpc/mobility: wait for memory transfer to complete
  (bsc#1201846 ltc#198761).
- commit 4c3e250</changelog>
  <changelog author="oneukum@suse.com" date="1658923200">- Bluetooth: btusb: Add the new support IDs for WCN6855
  (git-fixxes).
- Refresh
  patches.suse/Bluetooth-btusb-Add-one-more-Bluetooth-part-for-WCN6.patch.
- commit 91ad5ba</changelog>
  <changelog author="oneukum@suse.com" date="1658923201">- random: document add_hwgenerator_randomness() with other input
  functions (git-fixes).
- commit 0fb6e8a</changelog>
  <changelog author="oneukum@suse.com" date="1658923202">- blacklist.conf: breaks kABI for a cleanup
- commit 678666e</changelog>
  <changelog author="oneukum@suse.com" date="1658923203">- random: fix typo in comments (git-fixes).
- commit 6de6114</changelog>
  <changelog author="oneukum@suse.com" date="1658923204">- blacklist.conf: duplicate
- commit 1c70642</changelog>
  <changelog author="oneukum@suse.com" date="1658923205">- tee: fix put order in teedev_close_context() (git-fixes).
- commit 1650ec3</changelog>
  <changelog author="oneukum@suse.com" date="1658923206">- blacklist.conf: This is a cleanup, not fixing any bug
- commit 6f050ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1658923207">- net/sched: cls_u32: fix netns refcount changes in u32_change()
  (CVE-2022-29581 bsc#1199665).
- commit 6f81977</changelog>
  <changelog author="bp@suse.de" date="1659182400">- kvm/emulate: Fix SETcc emulation function offsets with SLS
  (bsc#1201930).
- Refresh
  patches.suse/x86-kvm-Fix-SETcc-emulation-for-return-thunks.patch.
- commit 154606a</changelog>
  <changelog author="bp@suse.de" date="1659182401">- KVM: emulate: do not adjust size of fastop and setcc subroutines
  (bsc#1201930).
- commit 935d297</changelog>
  <changelog author="mgorman@suse.de" date="1659441600">- sched/core: Do not requeue task on CPU excluded from cpus_mask
  (bnc#1199356).
- commit f226af5</changelog>
  <changelog author="bp@suse.de" date="1659528000">- x86/speculation: Add RSB VM Exit protections (bsc#1201726
  CVE-2022-26373).
- commit 87cc728</changelog>
  <changelog author="bp@suse.de" date="1659528001">- x86/speculation: Add LFENCE to RSB fill sequence (bsc#1201726
  CVE-2022-26373).
- commit e9f7bfc</changelog>
  <changelog author="fweisbecker@suse.de" date="1659614400">- posix-cpu-timers: Cleanup CPU timers before freeing them during exec (CVE-2022-2585 bsc#1202094).
- commit 2decf97</changelog>
  <changelog author="tiwai@suse.de" date="1659614401">- fix race between exit_itimers() and /proc/pid/timers
  (git-fixes).
- commit 62d2eea</changelog>
</package>
<package pkgid="abab7c7df7958c40e07177a6fbdd9f698c77a62e04d37a566c0ea53e20a21fa2" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.18.1"/>
  <changelog author="lhenriques@suse.de" date="1658750400">- blacklist.conf: add commit 7acae6183cf3
  I blacklisted the wrong commit: instead of adding 7acae6183cf3, I added the
  commit that introduced the bug fixed by it (which isn't present in SLE15-SP4).
- commit 8ec5489</changelog>
  <changelog author="ohering@suse.de" date="1658836800">- VMCI: Release notification_bitmap in error path (bsc#1199291,
  jsc#SLE-24635).
- VMCI: Check exclusive_vectors when freeing interrupt 1
  (bsc#1199291, jsc#SLE-24635).
- VMCI: Fix some error handling paths in vmci_guest_probe_device()
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams receive
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: add support for DMA datagrams sends (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: allocate send and receive buffers for DMA
  datagrams (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: register dummy IRQ handlers for DMA datagrams
  (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: set OS page size (bsc#1199291, jsc#SLE-24635).
- VMCI: dma dg: detect DMA datagram capability (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: add MMIO access to registers (bsc#1199291,
  jsc#SLE-24635).
- VMCI: dma dg: whitespace formatting change for vmci register
  defines (bsc#1199291, jsc#SLE-24635).
- commit 0e13b0d</changelog>
  <changelog author="ohering@suse.com" date="1658836801">- VMCI: Add support for ARM64 (bsc#1199291, jsc#SLE-24635).
- commit 91f9b43</changelog>
  <changelog author="mgorman@suse.de" date="1658836802">- page_alloc: fix invalid watemark check on a negative value
  (git fixes (mm/pgalloc)).
- commit 11d19f6</changelog>
  <changelog author="msuchanek@suse.de" date="1658836803">- powerpc/pseries/mobility: set NMI watchdog factor during an LPM
  (bsc#1201846 ltc#198761).
- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846
  ltc#198761).
- watchdog: export lockup_detector_reconfigure (bsc#1201846
  ltc#198761).
- powerpc/mobility: wait for memory transfer to complete
  (bsc#1201846 ltc#198761).
- commit 4c3e250</changelog>
  <changelog author="oneukum@suse.com" date="1658923200">- Bluetooth: btusb: Add the new support IDs for WCN6855
  (git-fixxes).
- Refresh
  patches.suse/Bluetooth-btusb-Add-one-more-Bluetooth-part-for-WCN6.patch.
- commit 91ad5ba</changelog>
  <changelog author="oneukum@suse.com" date="1658923201">- random: document add_hwgenerator_randomness() with other input
  functions (git-fixes).
- commit 0fb6e8a</changelog>
  <changelog author="oneukum@suse.com" date="1658923202">- blacklist.conf: breaks kABI for a cleanup
- commit 678666e</changelog>
  <changelog author="oneukum@suse.com" date="1658923203">- random: fix typo in comments (git-fixes).
- commit 6de6114</changelog>
  <changelog author="oneukum@suse.com" date="1658923204">- blacklist.conf: duplicate
- commit 1c70642</changelog>
  <changelog author="oneukum@suse.com" date="1658923205">- tee: fix put order in teedev_close_context() (git-fixes).
- commit 1650ec3</changelog>
  <changelog author="oneukum@suse.com" date="1658923206">- blacklist.conf: This is a cleanup, not fixing any bug
- commit 6f050ff</changelog>
  <changelog author="mkubecek@suse.cz" date="1658923207">- net/sched: cls_u32: fix netns refcount changes in u32_change()
  (CVE-2022-29581 bsc#1199665).
- commit 6f81977</changelog>
  <changelog author="bp@suse.de" date="1659182400">- kvm/emulate: Fix SETcc emulation function offsets with SLS
  (bsc#1201930).
- Refresh
  patches.suse/x86-kvm-Fix-SETcc-emulation-for-return-thunks.patch.
- commit 154606a</changelog>
  <changelog author="bp@suse.de" date="1659182401">- KVM: emulate: do not adjust size of fastop and setcc subroutines
  (bsc#1201930).
- commit 935d297</changelog>
  <changelog author="mgorman@suse.de" date="1659441600">- sched/core: Do not requeue task on CPU excluded from cpus_mask
  (bnc#1199356).
- commit f226af5</changelog>
  <changelog author="bp@suse.de" date="1659528000">- x86/speculation: Add RSB VM Exit protections (bsc#1201726
  CVE-2022-26373).
- commit 87cc728</changelog>
  <changelog author="bp@suse.de" date="1659528001">- x86/speculation: Add LFENCE to RSB fill sequence (bsc#1201726
  CVE-2022-26373).
- commit e9f7bfc</changelog>
  <changelog author="fweisbecker@suse.de" date="1659614400">- posix-cpu-timers: Cleanup CPU timers before freeing them during exec (CVE-2022-2585 bsc#1202094).
- commit 2decf97</changelog>
  <changelog author="tiwai@suse.de" date="1659614401">- fix race between exit_itimers() and /proc/pid/timers
  (git-fixes).
- commit 62d2eea</changelog>
</package>
<package pkgid="aedb2425c8acc70048c8c97f2f886f45837e9cb10266e00ccf5ba2ed4b6c6132" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.21.2"/>
  <changelog author="oneukum@suse.com" date="1662465600">- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (git-fixes).
- commit 88f2cbc</changelog>
  <changelog author="oneukum@suse.com" date="1662465601">- drivers: usb: dwc3-qcom: Add sdm660 compatible (git-fixes).
- commit 4f92bad</changelog>
  <changelog author="oneukum@suse.com" date="1662465602">- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core (git-fixes).
- commit a9fc9d1</changelog>
  <changelog author="oneukum@suse.com" date="1662465603">- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (git-fixes).
- commit 4ff0a76</changelog>
  <changelog author="vbabka@suse.cz" date="1662465604">- mm: pagewalk: Fix race between unmap and page walker (git-fixes,
  bsc#1203159).
- commit 35d24e5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662465605">- netfilter: nf_tables: disallow binding to already bound chain
  (CVE-2022-39190 bsc#1203117).
- commit bb5b67f</changelog>
  <changelog author="oneukum@suse.com" date="1662465606">- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  (git-fixes).
- commit d57061d</changelog>
  <changelog author="dwagner@suse.de" date="1662465607">- nvme-fabrics: parse nvme connect Linux error codes
  (bsc#1201865).
- commit f1d7d3e</changelog>
  <changelog author="dwagner@suse.de" date="1662465608">- nvme-rdma: Handle number of queue changes (bsc#1201865).
- nvme-tcp: Handle number of queue changes (bsc#1201865).
- nvmet: Expose max queues to configfs (bsc#1201865).
- commit 51b9b2e</changelog>
  <changelog author="ptesarik@suse.cz" date="1662465609">- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB
  hugepages (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow
  VM_WRITE (git-fixes).
- scsi: zfcp: Fix missing auto port scan and thus missing target
  ports (git-fixes).
- s390/zcore: fix race when reading from hardware system area
  (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space
  (git-fixes).
- vfio/ccw: Do not change FSM state in subchannel event
  (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- s390/cpumf: Handle events cycles and instructions identical
  (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes
  copied (git-fixes).
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
  (git-fixes).
- s390/stp: clock_delta should be signed (git-fixes).
- s390/kexec: handle R_390_PLT32DBL rela in
  arch_kexec_apply_relocations_add() (git-fixes).
- commit 9886bfd</changelog>
  <changelog author="oneukum@suse.com" date="1662465610">- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  (git-fixes).
- commit f62cbbb</changelog>
  <changelog author="oneukum@suse.com" date="1662465611">- usb: gadget: f_uac2: clean up some inconsistent indenting
  (git-fixes).
- commit 44a2b58</changelog>
  <changelog author="oneukum@suse.com" date="1662465612">- USB: serial: ch314: use usb_control_msg_recv() (git-fixes).
- commit 53e1aa3</changelog>
  <changelog author="oneukum@suse.com" date="1662465613">- USB: serial: ch341: fix lost character on LCR updates
  (git-fixes).
- commit 62469ec</changelog>
  <changelog author="oneukum@suse.com" date="1662465614">- USB: serial: ch341: fix disabled rx timer on older devices
  (git-fixes).
- commit 9eefb78</changelog>
  <changelog author="dwagner@suse.de" date="1662465615">- nvme-tcp: fix UAF when detecting digest errors (bsc#1200313
  bsc#1201489).
- commit d1c233b</changelog>
  <changelog author="lduncan@suse.com" date="1662465616">- scsi: sg: Allow waiting for commands to complete on removed
  device (git-fixes).
- scsi: smartpqi: Fix DMA direction for RAID requests (git-fixes).
- scsi: mpt3sas: Stop fw fault watchdog work item during system
  shutdown (git-fixes).
- scsi: ufs: core: Fix another task management completion race
  (git-fixes).
- scsi: ufs: core: Fix task management completion timeout race
  (git-fixes).
- commit b8be98c</changelog>
  <changelog author="mbrugger@suse.com" date="1662465617">- net: stmmac: dwc-qos: Disable split header for Tegra194
  (bsc#1194904).
- net: stmmac: disable Split Header (SPH) for Intel platforms
  (bsc#1194904).
- commit 80bcb5a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662552000">- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
  (bsc#1202989).
- commit 2353f59</changelog>
  <changelog author="tiwai@suse.de" date="1662552001">- usb: gadget: f_uac2: fix superspeed transfer (git-fixes).
- commit 2e0f852</changelog>
</package>
<package pkgid="5bbee5cd95af6c246136002c0c411de30c9dea2d289ccdb67da1d1e1875c05df" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.24.21.2"/>
  <changelog author="oneukum@suse.com" date="1662465600">- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (git-fixes).
- commit 88f2cbc</changelog>
  <changelog author="oneukum@suse.com" date="1662465601">- drivers: usb: dwc3-qcom: Add sdm660 compatible (git-fixes).
- commit 4f92bad</changelog>
  <changelog author="oneukum@suse.com" date="1662465602">- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core (git-fixes).
- commit a9fc9d1</changelog>
  <changelog author="oneukum@suse.com" date="1662465603">- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (git-fixes).
- commit 4ff0a76</changelog>
  <changelog author="vbabka@suse.cz" date="1662465604">- mm: pagewalk: Fix race between unmap and page walker (git-fixes,
  bsc#1203159).
- commit 35d24e5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662465605">- netfilter: nf_tables: disallow binding to already bound chain
  (CVE-2022-39190 bsc#1203117).
- commit bb5b67f</changelog>
  <changelog author="oneukum@suse.com" date="1662465606">- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  (git-fixes).
- commit d57061d</changelog>
  <changelog author="dwagner@suse.de" date="1662465607">- nvme-fabrics: parse nvme connect Linux error codes
  (bsc#1201865).
- commit f1d7d3e</changelog>
  <changelog author="dwagner@suse.de" date="1662465608">- nvme-rdma: Handle number of queue changes (bsc#1201865).
- nvme-tcp: Handle number of queue changes (bsc#1201865).
- nvmet: Expose max queues to configfs (bsc#1201865).
- commit 51b9b2e</changelog>
  <changelog author="ptesarik@suse.cz" date="1662465609">- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB
  hugepages (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow
  VM_WRITE (git-fixes).
- scsi: zfcp: Fix missing auto port scan and thus missing target
  ports (git-fixes).
- s390/zcore: fix race when reading from hardware system area
  (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space
  (git-fixes).
- vfio/ccw: Do not change FSM state in subchannel event
  (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- s390/cpumf: Handle events cycles and instructions identical
  (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes
  copied (git-fixes).
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
  (git-fixes).
- s390/stp: clock_delta should be signed (git-fixes).
- s390/kexec: handle R_390_PLT32DBL rela in
  arch_kexec_apply_relocations_add() (git-fixes).
- commit 9886bfd</changelog>
  <changelog author="oneukum@suse.com" date="1662465610">- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  (git-fixes).
- commit f62cbbb</changelog>
  <changelog author="oneukum@suse.com" date="1662465611">- usb: gadget: f_uac2: clean up some inconsistent indenting
  (git-fixes).
- commit 44a2b58</changelog>
  <changelog author="oneukum@suse.com" date="1662465612">- USB: serial: ch314: use usb_control_msg_recv() (git-fixes).
- commit 53e1aa3</changelog>
  <changelog author="oneukum@suse.com" date="1662465613">- USB: serial: ch341: fix lost character on LCR updates
  (git-fixes).
- commit 62469ec</changelog>
  <changelog author="oneukum@suse.com" date="1662465614">- USB: serial: ch341: fix disabled rx timer on older devices
  (git-fixes).
- commit 9eefb78</changelog>
  <changelog author="dwagner@suse.de" date="1662465615">- nvme-tcp: fix UAF when detecting digest errors (bsc#1200313
  bsc#1201489).
- commit d1c233b</changelog>
  <changelog author="lduncan@suse.com" date="1662465616">- scsi: sg: Allow waiting for commands to complete on removed
  device (git-fixes).
- scsi: smartpqi: Fix DMA direction for RAID requests (git-fixes).
- scsi: mpt3sas: Stop fw fault watchdog work item during system
  shutdown (git-fixes).
- scsi: ufs: core: Fix another task management completion race
  (git-fixes).
- scsi: ufs: core: Fix task management completion timeout race
  (git-fixes).
- commit b8be98c</changelog>
  <changelog author="mbrugger@suse.com" date="1662465617">- net: stmmac: dwc-qos: Disable split header for Tegra194
  (bsc#1194904).
- net: stmmac: disable Split Header (SPH) for Intel platforms
  (bsc#1194904).
- commit 80bcb5a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662552000">- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
  (bsc#1202989).
- commit 2353f59</changelog>
  <changelog author="tiwai@suse.de" date="1662552001">- usb: gadget: f_uac2: fix superspeed transfer (git-fixes).
- commit 2e0f852</changelog>
</package>
<package pkgid="fa6ba6355c74a337502065456706596e030df2ba4daff51914c82f5dc5acd37d" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.21.2"/>
  <changelog author="oneukum@suse.com" date="1662465600">- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (git-fixes).
- commit 88f2cbc</changelog>
  <changelog author="oneukum@suse.com" date="1662465601">- drivers: usb: dwc3-qcom: Add sdm660 compatible (git-fixes).
- commit 4f92bad</changelog>
  <changelog author="oneukum@suse.com" date="1662465602">- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core (git-fixes).
- commit a9fc9d1</changelog>
  <changelog author="oneukum@suse.com" date="1662465603">- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (git-fixes).
- commit 4ff0a76</changelog>
  <changelog author="vbabka@suse.cz" date="1662465604">- mm: pagewalk: Fix race between unmap and page walker (git-fixes,
  bsc#1203159).
- commit 35d24e5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662465605">- netfilter: nf_tables: disallow binding to already bound chain
  (CVE-2022-39190 bsc#1203117).
- commit bb5b67f</changelog>
  <changelog author="oneukum@suse.com" date="1662465606">- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  (git-fixes).
- commit d57061d</changelog>
  <changelog author="dwagner@suse.de" date="1662465607">- nvme-fabrics: parse nvme connect Linux error codes
  (bsc#1201865).
- commit f1d7d3e</changelog>
  <changelog author="dwagner@suse.de" date="1662465608">- nvme-rdma: Handle number of queue changes (bsc#1201865).
- nvme-tcp: Handle number of queue changes (bsc#1201865).
- nvmet: Expose max queues to configfs (bsc#1201865).
- commit 51b9b2e</changelog>
  <changelog author="ptesarik@suse.cz" date="1662465609">- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB
  hugepages (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow
  VM_WRITE (git-fixes).
- scsi: zfcp: Fix missing auto port scan and thus missing target
  ports (git-fixes).
- s390/zcore: fix race when reading from hardware system area
  (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space
  (git-fixes).
- vfio/ccw: Do not change FSM state in subchannel event
  (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- s390/cpumf: Handle events cycles and instructions identical
  (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes
  copied (git-fixes).
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
  (git-fixes).
- s390/stp: clock_delta should be signed (git-fixes).
- s390/kexec: handle R_390_PLT32DBL rela in
  arch_kexec_apply_relocations_add() (git-fixes).
- commit 9886bfd</changelog>
  <changelog author="oneukum@suse.com" date="1662465610">- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  (git-fixes).
- commit f62cbbb</changelog>
  <changelog author="oneukum@suse.com" date="1662465611">- usb: gadget: f_uac2: clean up some inconsistent indenting
  (git-fixes).
- commit 44a2b58</changelog>
  <changelog author="oneukum@suse.com" date="1662465612">- USB: serial: ch314: use usb_control_msg_recv() (git-fixes).
- commit 53e1aa3</changelog>
  <changelog author="oneukum@suse.com" date="1662465613">- USB: serial: ch341: fix lost character on LCR updates
  (git-fixes).
- commit 62469ec</changelog>
  <changelog author="oneukum@suse.com" date="1662465614">- USB: serial: ch341: fix disabled rx timer on older devices
  (git-fixes).
- commit 9eefb78</changelog>
  <changelog author="dwagner@suse.de" date="1662465615">- nvme-tcp: fix UAF when detecting digest errors (bsc#1200313
  bsc#1201489).
- commit d1c233b</changelog>
  <changelog author="lduncan@suse.com" date="1662465616">- scsi: sg: Allow waiting for commands to complete on removed
  device (git-fixes).
- scsi: smartpqi: Fix DMA direction for RAID requests (git-fixes).
- scsi: mpt3sas: Stop fw fault watchdog work item during system
  shutdown (git-fixes).
- scsi: ufs: core: Fix another task management completion race
  (git-fixes).
- scsi: ufs: core: Fix task management completion timeout race
  (git-fixes).
- commit b8be98c</changelog>
  <changelog author="mbrugger@suse.com" date="1662465617">- net: stmmac: dwc-qos: Disable split header for Tegra194
  (bsc#1194904).
- net: stmmac: disable Split Header (SPH) for Intel platforms
  (bsc#1194904).
- commit 80bcb5a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662552000">- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
  (bsc#1202989).
- commit 2353f59</changelog>
  <changelog author="tiwai@suse.de" date="1662552001">- usb: gadget: f_uac2: fix superspeed transfer (git-fixes).
- commit 2e0f852</changelog>
</package>
<package pkgid="c46dabd7620f96a57161556328a2402888bdee0af491f493fc5cf579baf698e6" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.21.2"/>
  <changelog author="oneukum@suse.com" date="1662465600">- usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (git-fixes).
- commit 88f2cbc</changelog>
  <changelog author="oneukum@suse.com" date="1662465601">- drivers: usb: dwc3-qcom: Add sdm660 compatible (git-fixes).
- commit 4f92bad</changelog>
  <changelog author="oneukum@suse.com" date="1662465602">- usb: dwc3: dwc3-qcom: Add missing platform_device_put() in dwc3_qcom_acpi_register_core (git-fixes).
- commit a9fc9d1</changelog>
  <changelog author="oneukum@suse.com" date="1662465603">- usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (git-fixes).
- commit 4ff0a76</changelog>
  <changelog author="vbabka@suse.cz" date="1662465604">- mm: pagewalk: Fix race between unmap and page walker (git-fixes,
  bsc#1203159).
- commit 35d24e5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662465605">- netfilter: nf_tables: disallow binding to already bound chain
  (CVE-2022-39190 bsc#1203117).
- commit bb5b67f</changelog>
  <changelog author="oneukum@suse.com" date="1662465606">- usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup
  (git-fixes).
- commit d57061d</changelog>
  <changelog author="dwagner@suse.de" date="1662465607">- nvme-fabrics: parse nvme connect Linux error codes
  (bsc#1201865).
- commit f1d7d3e</changelog>
  <changelog author="dwagner@suse.de" date="1662465608">- nvme-rdma: Handle number of queue changes (bsc#1201865).
- nvme-tcp: Handle number of queue changes (bsc#1201865).
- nvmet: Expose max queues to configfs (bsc#1201865).
- commit 51b9b2e</changelog>
  <changelog author="ptesarik@suse.cz" date="1662465609">- s390/hugetlb: fix prepare_hugepage_range() check for 2 GB
  hugepages (git-fixes).
- s390/mm: do not trigger write fault when vma does not allow
  VM_WRITE (git-fixes).
- scsi: zfcp: Fix missing auto port scan and thus missing target
  ports (git-fixes).
- s390/zcore: fix race when reading from hardware system area
  (git-fixes).
- s390/crash: fix incorrect number of bytes to copy to user space
  (git-fixes).
- vfio/ccw: Do not change FSM state in subchannel event
  (git-fixes).
- vfio/ccw: Remove UUID from s390 debug log (git-fixes).
- s390/cpumf: Handle events cycles and instructions identical
  (git-fixes).
- s390/crash: make copy_oldmem_page() return number of bytes
  copied (git-fixes).
- s390/mm: use non-quiescing sske for KVM switch to keyed guest
  (git-fixes).
- s390/stp: clock_delta should be signed (git-fixes).
- s390/kexec: handle R_390_PLT32DBL rela in
  arch_kexec_apply_relocations_add() (git-fixes).
- commit 9886bfd</changelog>
  <changelog author="oneukum@suse.com" date="1662465610">- usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop
  (git-fixes).
- commit f62cbbb</changelog>
  <changelog author="oneukum@suse.com" date="1662465611">- usb: gadget: f_uac2: clean up some inconsistent indenting
  (git-fixes).
- commit 44a2b58</changelog>
  <changelog author="oneukum@suse.com" date="1662465612">- USB: serial: ch314: use usb_control_msg_recv() (git-fixes).
- commit 53e1aa3</changelog>
  <changelog author="oneukum@suse.com" date="1662465613">- USB: serial: ch341: fix lost character on LCR updates
  (git-fixes).
- commit 62469ec</changelog>
  <changelog author="oneukum@suse.com" date="1662465614">- USB: serial: ch341: fix disabled rx timer on older devices
  (git-fixes).
- commit 9eefb78</changelog>
  <changelog author="dwagner@suse.de" date="1662465615">- nvme-tcp: fix UAF when detecting digest errors (bsc#1200313
  bsc#1201489).
- commit d1c233b</changelog>
  <changelog author="lduncan@suse.com" date="1662465616">- scsi: sg: Allow waiting for commands to complete on removed
  device (git-fixes).
- scsi: smartpqi: Fix DMA direction for RAID requests (git-fixes).
- scsi: mpt3sas: Stop fw fault watchdog work item during system
  shutdown (git-fixes).
- scsi: ufs: core: Fix another task management completion race
  (git-fixes).
- scsi: ufs: core: Fix task management completion timeout race
  (git-fixes).
- commit b8be98c</changelog>
  <changelog author="mbrugger@suse.com" date="1662465617">- net: stmmac: dwc-qos: Disable split header for Tegra194
  (bsc#1194904).
- net: stmmac: disable Split Header (SPH) for Intel platforms
  (bsc#1194904).
- commit 80bcb5a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1662552000">- Revert "ipv6: Honor all IPv6 PIO Valid Lifetime values"
  (bsc#1202989).
- commit 2353f59</changelog>
  <changelog author="tiwai@suse.de" date="1662552001">- usb: gadget: f_uac2: fix superspeed transfer (git-fixes).
- commit 2e0f852</changelog>
</package>
<package pkgid="60e6fcf2a84ffc8d6d8bdc16cd44c6b61ad26de871faa66beb5aef60a05dd33b" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.28.1"/>
  <changelog author="oneukum@suse.com" date="1664971200">- media: st-delta: Fix PM disable depth imbalance in delta_probe
  (git-fixes).
- commit 30518b0</changelog>
  <changelog author="oneukum@suse.com" date="1664971201">- media: exynos4-is: Change clk_disable to clk_disable_unprepare
  (git-fixes).
- commit 332ca3f</changelog>
  <changelog author="oneukum@suse.com" date="1664971202">- media: vsp1: Fix offset calculation for plane cropping.
- commit dc309b5</changelog>
  <changelog author="oneukum@suse.com" date="1664971203">- blacklist.conf: not relevant in our configurations
- commit 8171bfe</changelog>
  <changelog author="oneukum@suse.com" date="1664971204">- media: imx-jpeg: Correct some definition according specification
  (git-fixes).
- commit bdf4126</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971205">- blacklist.conf: Append 'sysfb: Enable boot time VESA graphic mode selection'
- commit b93ba64</changelog>
  <changelog author="oneukum@suse.com" date="1664971206">- media: imx-jpeg: Leave a blank space before the configuration
  data (git-fixes).
- commit a2d45c7</changelog>
  <changelog author="bp@suse.de" date="1664971207">- x86/ibt,ftrace: Make function-graph play nice (bsc#1203969).
- commit c020446</changelog>
  <changelog author="oneukum@suse.com" date="1664971208">- media: imx-jpeg: Add pm-sleep support for imx-jpeg (git-fixes).
- commit d514aa5</changelog>
  <changelog author="oneukum@suse.com" date="1664971209">- media: imx-jpeg: Fix potential array out of bounds in
  queue_setup (git-fixes).
- commit 8041860</changelog>
  <changelog author="oneukum@suse.com" date="1664971210">- media: imx-jpeg: Refactor function mxc_jpeg_parse (git-fixes).
- commit e2ddfcf</changelog>
  <changelog author="oneukum@suse.com" date="1664971211">- media: imx-jpeg: Disable slot interrupt when frame done
  (git-fixes).
- commit 36d622f</changelog>
  <changelog author="oneukum@suse.com" date="1664971212">- blacklist.conf: not relevant in our configurations
- commit 586058b</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971213">- Clean up kernel-config settings via run_oldconfig.sh
  Invoke run_oldconfig.sh to clean the kernel-config settings from
  unset symbols. Otherwise these settings interfere with actual config
  changes.
- commit 8a799ae</changelog>
  <changelog author="oneukum@suse.com" date="1664971214">- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment.
- commit 20a025b</changelog>
  <changelog author="tiwai@suse.de" date="1665403200">- wifi: cfg80211: avoid nontransmitted BSS list corruption
  (CVE-2022-42721 bsc#1204060).
- wifi: cfg80211: fix BSS refcounting bugs (CVE-2022-42720
  bsc#1204059).
- commit 82311e4</changelog>
  <changelog author="tiwai@suse.de" date="1665403201">- wifi: mac80211: refactor elements parsing with parameter struct
  (CVE-2022-42719 bsc#1204051).
- mac80211: always allocate struct ieee802_11_elems
  (CVE-2022-42719 bsc#1204051).
- mac80211: mlme: find auth challenge directly (CVE-2022-42719
  bsc#1204051).
- mac80211: move CRC into struct ieee802_11_elems (CVE-2022-42719
  bsc#1204051).
- commit b28a982</changelog>
  <changelog author="tiwai@suse.de" date="1665403202">- mac80211: fix memory leaks with element parsing (CVE-2022-42719
  bsc#1204051).
- commit f9a2be2</changelog>
  <changelog author="tiwai@suse.de" date="1665403203">- wifi: mac80211: fix MBSSID parsing use-after-free
  (CVE-2022-42719 bsc#1204051).
- commit bab6e58</changelog>
  <changelog author="tiwai@suse.de" date="1665403204">- wifi: mac80211: fix crash in beacon protection for P2P-device
  (CVE-2022-42722 bsc#1204125).
- commit 38da0b9</changelog>
</package>
<package pkgid="57c8e5302f28fe68c8c37f72ecc1639e9ff7552a68518fa2b3c6e19a3f71f338" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.24.28.1"/>
  <changelog author="oneukum@suse.com" date="1664971200">- media: st-delta: Fix PM disable depth imbalance in delta_probe
  (git-fixes).
- commit 30518b0</changelog>
  <changelog author="oneukum@suse.com" date="1664971201">- media: exynos4-is: Change clk_disable to clk_disable_unprepare
  (git-fixes).
- commit 332ca3f</changelog>
  <changelog author="oneukum@suse.com" date="1664971202">- media: vsp1: Fix offset calculation for plane cropping.
- commit dc309b5</changelog>
  <changelog author="oneukum@suse.com" date="1664971203">- blacklist.conf: not relevant in our configurations
- commit 8171bfe</changelog>
  <changelog author="oneukum@suse.com" date="1664971204">- media: imx-jpeg: Correct some definition according specification
  (git-fixes).
- commit bdf4126</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971205">- blacklist.conf: Append 'sysfb: Enable boot time VESA graphic mode selection'
- commit b93ba64</changelog>
  <changelog author="oneukum@suse.com" date="1664971206">- media: imx-jpeg: Leave a blank space before the configuration
  data (git-fixes).
- commit a2d45c7</changelog>
  <changelog author="bp@suse.de" date="1664971207">- x86/ibt,ftrace: Make function-graph play nice (bsc#1203969).
- commit c020446</changelog>
  <changelog author="oneukum@suse.com" date="1664971208">- media: imx-jpeg: Add pm-sleep support for imx-jpeg (git-fixes).
- commit d514aa5</changelog>
  <changelog author="oneukum@suse.com" date="1664971209">- media: imx-jpeg: Fix potential array out of bounds in
  queue_setup (git-fixes).
- commit 8041860</changelog>
  <changelog author="oneukum@suse.com" date="1664971210">- media: imx-jpeg: Refactor function mxc_jpeg_parse (git-fixes).
- commit e2ddfcf</changelog>
  <changelog author="oneukum@suse.com" date="1664971211">- media: imx-jpeg: Disable slot interrupt when frame done
  (git-fixes).
- commit 36d622f</changelog>
  <changelog author="oneukum@suse.com" date="1664971212">- blacklist.conf: not relevant in our configurations
- commit 586058b</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971213">- Clean up kernel-config settings via run_oldconfig.sh
  Invoke run_oldconfig.sh to clean the kernel-config settings from
  unset symbols. Otherwise these settings interfere with actual config
  changes.
- commit 8a799ae</changelog>
  <changelog author="oneukum@suse.com" date="1664971214">- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment.
- commit 20a025b</changelog>
  <changelog author="tiwai@suse.de" date="1665403200">- wifi: cfg80211: avoid nontransmitted BSS list corruption
  (CVE-2022-42721 bsc#1204060).
- wifi: cfg80211: fix BSS refcounting bugs (CVE-2022-42720
  bsc#1204059).
- commit 82311e4</changelog>
  <changelog author="tiwai@suse.de" date="1665403201">- wifi: mac80211: refactor elements parsing with parameter struct
  (CVE-2022-42719 bsc#1204051).
- mac80211: always allocate struct ieee802_11_elems
  (CVE-2022-42719 bsc#1204051).
- mac80211: mlme: find auth challenge directly (CVE-2022-42719
  bsc#1204051).
- mac80211: move CRC into struct ieee802_11_elems (CVE-2022-42719
  bsc#1204051).
- commit b28a982</changelog>
  <changelog author="tiwai@suse.de" date="1665403202">- mac80211: fix memory leaks with element parsing (CVE-2022-42719
  bsc#1204051).
- commit f9a2be2</changelog>
  <changelog author="tiwai@suse.de" date="1665403203">- wifi: mac80211: fix MBSSID parsing use-after-free
  (CVE-2022-42719 bsc#1204051).
- commit bab6e58</changelog>
  <changelog author="tiwai@suse.de" date="1665403204">- wifi: mac80211: fix crash in beacon protection for P2P-device
  (CVE-2022-42722 bsc#1204125).
- commit 38da0b9</changelog>
</package>
<package pkgid="a89cb12fb50e187767816f2ae1b911f8bf16618e0ccd038dedbbdacba1da29ba" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.28.1"/>
  <changelog author="oneukum@suse.com" date="1664971200">- media: st-delta: Fix PM disable depth imbalance in delta_probe
  (git-fixes).
- commit 30518b0</changelog>
  <changelog author="oneukum@suse.com" date="1664971201">- media: exynos4-is: Change clk_disable to clk_disable_unprepare
  (git-fixes).
- commit 332ca3f</changelog>
  <changelog author="oneukum@suse.com" date="1664971202">- media: vsp1: Fix offset calculation for plane cropping.
- commit dc309b5</changelog>
  <changelog author="oneukum@suse.com" date="1664971203">- blacklist.conf: not relevant in our configurations
- commit 8171bfe</changelog>
  <changelog author="oneukum@suse.com" date="1664971204">- media: imx-jpeg: Correct some definition according specification
  (git-fixes).
- commit bdf4126</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971205">- blacklist.conf: Append 'sysfb: Enable boot time VESA graphic mode selection'
- commit b93ba64</changelog>
  <changelog author="oneukum@suse.com" date="1664971206">- media: imx-jpeg: Leave a blank space before the configuration
  data (git-fixes).
- commit a2d45c7</changelog>
  <changelog author="bp@suse.de" date="1664971207">- x86/ibt,ftrace: Make function-graph play nice (bsc#1203969).
- commit c020446</changelog>
  <changelog author="oneukum@suse.com" date="1664971208">- media: imx-jpeg: Add pm-sleep support for imx-jpeg (git-fixes).
- commit d514aa5</changelog>
  <changelog author="oneukum@suse.com" date="1664971209">- media: imx-jpeg: Fix potential array out of bounds in
  queue_setup (git-fixes).
- commit 8041860</changelog>
  <changelog author="oneukum@suse.com" date="1664971210">- media: imx-jpeg: Refactor function mxc_jpeg_parse (git-fixes).
- commit e2ddfcf</changelog>
  <changelog author="oneukum@suse.com" date="1664971211">- media: imx-jpeg: Disable slot interrupt when frame done
  (git-fixes).
- commit 36d622f</changelog>
  <changelog author="oneukum@suse.com" date="1664971212">- blacklist.conf: not relevant in our configurations
- commit 586058b</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971213">- Clean up kernel-config settings via run_oldconfig.sh
  Invoke run_oldconfig.sh to clean the kernel-config settings from
  unset symbols. Otherwise these settings interfere with actual config
  changes.
- commit 8a799ae</changelog>
  <changelog author="oneukum@suse.com" date="1664971214">- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment.
- commit 20a025b</changelog>
  <changelog author="tiwai@suse.de" date="1665403200">- wifi: cfg80211: avoid nontransmitted BSS list corruption
  (CVE-2022-42721 bsc#1204060).
- wifi: cfg80211: fix BSS refcounting bugs (CVE-2022-42720
  bsc#1204059).
- commit 82311e4</changelog>
  <changelog author="tiwai@suse.de" date="1665403201">- wifi: mac80211: refactor elements parsing with parameter struct
  (CVE-2022-42719 bsc#1204051).
- mac80211: always allocate struct ieee802_11_elems
  (CVE-2022-42719 bsc#1204051).
- mac80211: mlme: find auth challenge directly (CVE-2022-42719
  bsc#1204051).
- mac80211: move CRC into struct ieee802_11_elems (CVE-2022-42719
  bsc#1204051).
- commit b28a982</changelog>
  <changelog author="tiwai@suse.de" date="1665403202">- mac80211: fix memory leaks with element parsing (CVE-2022-42719
  bsc#1204051).
- commit f9a2be2</changelog>
  <changelog author="tiwai@suse.de" date="1665403203">- wifi: mac80211: fix MBSSID parsing use-after-free
  (CVE-2022-42719 bsc#1204051).
- commit bab6e58</changelog>
  <changelog author="tiwai@suse.de" date="1665403204">- wifi: mac80211: fix crash in beacon protection for P2P-device
  (CVE-2022-42722 bsc#1204125).
- commit 38da0b9</changelog>
</package>
<package pkgid="bcf33d07bf1540583fc82429d70344fe102f43cd228dfe198445d89df888d2fc" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.28.1"/>
  <changelog author="oneukum@suse.com" date="1664971200">- media: st-delta: Fix PM disable depth imbalance in delta_probe
  (git-fixes).
- commit 30518b0</changelog>
  <changelog author="oneukum@suse.com" date="1664971201">- media: exynos4-is: Change clk_disable to clk_disable_unprepare
  (git-fixes).
- commit 332ca3f</changelog>
  <changelog author="oneukum@suse.com" date="1664971202">- media: vsp1: Fix offset calculation for plane cropping.
- commit dc309b5</changelog>
  <changelog author="oneukum@suse.com" date="1664971203">- blacklist.conf: not relevant in our configurations
- commit 8171bfe</changelog>
  <changelog author="oneukum@suse.com" date="1664971204">- media: imx-jpeg: Correct some definition according specification
  (git-fixes).
- commit bdf4126</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971205">- blacklist.conf: Append 'sysfb: Enable boot time VESA graphic mode selection'
- commit b93ba64</changelog>
  <changelog author="oneukum@suse.com" date="1664971206">- media: imx-jpeg: Leave a blank space before the configuration
  data (git-fixes).
- commit a2d45c7</changelog>
  <changelog author="bp@suse.de" date="1664971207">- x86/ibt,ftrace: Make function-graph play nice (bsc#1203969).
- commit c020446</changelog>
  <changelog author="oneukum@suse.com" date="1664971208">- media: imx-jpeg: Add pm-sleep support for imx-jpeg (git-fixes).
- commit d514aa5</changelog>
  <changelog author="oneukum@suse.com" date="1664971209">- media: imx-jpeg: Fix potential array out of bounds in
  queue_setup (git-fixes).
- commit 8041860</changelog>
  <changelog author="oneukum@suse.com" date="1664971210">- media: imx-jpeg: Refactor function mxc_jpeg_parse (git-fixes).
- commit e2ddfcf</changelog>
  <changelog author="oneukum@suse.com" date="1664971211">- media: imx-jpeg: Disable slot interrupt when frame done
  (git-fixes).
- commit 36d622f</changelog>
  <changelog author="oneukum@suse.com" date="1664971212">- blacklist.conf: not relevant in our configurations
- commit 586058b</changelog>
  <changelog author="tzimmermann@suse.de" date="1664971213">- Clean up kernel-config settings via run_oldconfig.sh
  Invoke run_oldconfig.sh to clean the kernel-config settings from
  unset symbols. Otherwise these settings interfere with actual config
  changes.
- commit 8a799ae</changelog>
  <changelog author="oneukum@suse.com" date="1664971214">- media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment.
- commit 20a025b</changelog>
  <changelog author="tiwai@suse.de" date="1665403200">- wifi: cfg80211: avoid nontransmitted BSS list corruption
  (CVE-2022-42721 bsc#1204060).
- wifi: cfg80211: fix BSS refcounting bugs (CVE-2022-42720
  bsc#1204059).
- commit 82311e4</changelog>
  <changelog author="tiwai@suse.de" date="1665403201">- wifi: mac80211: refactor elements parsing with parameter struct
  (CVE-2022-42719 bsc#1204051).
- mac80211: always allocate struct ieee802_11_elems
  (CVE-2022-42719 bsc#1204051).
- mac80211: mlme: find auth challenge directly (CVE-2022-42719
  bsc#1204051).
- mac80211: move CRC into struct ieee802_11_elems (CVE-2022-42719
  bsc#1204051).
- commit b28a982</changelog>
  <changelog author="tiwai@suse.de" date="1665403202">- mac80211: fix memory leaks with element parsing (CVE-2022-42719
  bsc#1204051).
- commit f9a2be2</changelog>
  <changelog author="tiwai@suse.de" date="1665403203">- wifi: mac80211: fix MBSSID parsing use-after-free
  (CVE-2022-42719 bsc#1204051).
- commit bab6e58</changelog>
  <changelog author="tiwai@suse.de" date="1665403204">- wifi: mac80211: fix crash in beacon protection for P2P-device
  (CVE-2022-42722 bsc#1204125).
- commit 38da0b9</changelog>
</package>
<package pkgid="65440f874ffe1b42c098b4bfc5c0057ba6e6c2b06b89e2ffa30f4242d473143c" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.33.2"/>
  <changelog author="dwagner@suse.de" date="1667390400">- scsi: lpfc: Update the obsolete adapter list (bsc#1204142).
- commit dc8f2da</changelog>
  <changelog author="tiwai@suse.de" date="1667390401">- Drop Dell Dock regression fix patch again (bsc#1204719)
  It tunred out to be bogus, a different fix is needed
- commit 2c62bb9</changelog>
  <changelog author="tiwai@suse.de" date="1667390402">- wifi: brcmfmac: Fix potential buffer overflow in
  brcmf_fweh_event_worker() (CVE-2022-3628 bsc#1204868).
- commit 968feec</changelog>
  <changelog author="tiwai@suse.de" date="1667390403">- iommu/vt-d: Do not falsely log intel_iommu is unsupported
  kernel option (bsc#1204947).
- commit 440c18c</changelog>
  <changelog author="martin.wilck@suse.com" date="1667390404">- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- commit 0d14223</changelog>
  <changelog author="vkarasulli@suse.de" date="1667390405">- Update patch references to
  patches.suse/0001-floppy-disable-FDRAWCMD-by-default.patch
  (bsc#1200692 CVE-2022-33981).
- commit 913147c</changelog>
  <changelog author="msuchanek@suse.de" date="1667390406">- Refresh patches.suse/ppc64-kdump-Limit-kdump-base-to-512MB.patch
  to upstream version.
- commit 0f63234</changelog>
  <changelog author="tiwai@suse.de" date="1667476800">- ring-buffer: Check for NULL cpu_buffer in
  ring_buffer_wake_waiters() (bsc#1204705).
- commit 2e712ad</changelog>
  <changelog author="tiwai@suse.de" date="1667476801">- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
  (git-fixes).
- ALSA: usb-audio: make read-only array marker static const
  (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c
  (git-fixes).
- commit 7b36d72</changelog>
  <changelog author="tiwai@suse.de" date="1667476802">- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos
  (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-More-comprehensive-mixer-map-for-ASUS.patch.
- commit aad3dbe</changelog>
  <changelog author="tiwai@suse.de" date="1667476803">- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support
  (git-fixes).
- ALSA: scarlett2: Add support for the internal "standalone"
  switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections
  (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in
  scarlett2_usb() (git-fixes).
- commit 51a746f</changelog>
  <changelog author="tiwai@suse.de" date="1667476804">- ALSA: hiface: fix repeated words in comments (git-fixes).
- commit 1897e56</changelog>
  <changelog author="vbabka@suse.cz" date="1667476805">- Update kabi files. Refresh from Nov 2022 MU - 5.14.21-150400.24.28.1
- commit a5edbce</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1667476806">- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- commit 6f2ee60</changelog>
  <changelog author="tiwai@suse.de" date="1667563200">- blacklist.conf: add 8250_mtk entry that was reverted
- commit c43b30f</changelog>
  <changelog author="tiwai@suse.de" date="1667563201">- Move upstreamed BT fixes into sorted section
- commit 9cff1e2</changelog>
  <changelog author="tiwai@suse.de" date="1667563202">- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by
  l2cap_reassemble_sdu (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration
  (git-fixes).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- commit 9e67c0b</changelog>
  <changelog author="tiwai@suse.de" date="1667563203">- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- vsock: fix possible infinite sleep in
  vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg()
  (git-fixes).
- mISDN: fix possible memory leak in mISDN_register_device()
  (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame()
  (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in
  nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send()
  (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing
  the device (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or
  later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown
  (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being
  a V0.96 controller (git-fixes).
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into
  core (git-fixes).
- commit 356bf7e</changelog>
  <changelog author="tiwai@suse.de" date="1667563204">- x86/sev: Don't use cc_platform_has() for early SEV-SNP calls
  (bsc#1204970).
- x86/boot: Don't propagate uninitialized
  boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/compressed/64: Add identity mappings for setup_data entries
  (bsc#1204970).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Remove duplicated assignment to variable info
  (bsc#1204970).
- commit 1ad6c0c</changelog>
  <changelog author="tiwai@suse.de" date="1667563205">- Move upstreamed patches into sorted section
- commit 490afd7</changelog>
</package>
<package pkgid="1b88c22673f01f3f4acd0d9160ea5fbbee7d065d71878b31c08a8f26fbeef2f7" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.24.33.2"/>
  <changelog author="dwagner@suse.de" date="1667390400">- scsi: lpfc: Update the obsolete adapter list (bsc#1204142).
- commit dc8f2da</changelog>
  <changelog author="tiwai@suse.de" date="1667390401">- Drop Dell Dock regression fix patch again (bsc#1204719)
  It tunred out to be bogus, a different fix is needed
- commit 2c62bb9</changelog>
  <changelog author="tiwai@suse.de" date="1667390402">- wifi: brcmfmac: Fix potential buffer overflow in
  brcmf_fweh_event_worker() (CVE-2022-3628 bsc#1204868).
- commit 968feec</changelog>
  <changelog author="tiwai@suse.de" date="1667390403">- iommu/vt-d: Do not falsely log intel_iommu is unsupported
  kernel option (bsc#1204947).
- commit 440c18c</changelog>
  <changelog author="martin.wilck@suse.com" date="1667390404">- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- commit 0d14223</changelog>
  <changelog author="vkarasulli@suse.de" date="1667390405">- Update patch references to
  patches.suse/0001-floppy-disable-FDRAWCMD-by-default.patch
  (bsc#1200692 CVE-2022-33981).
- commit 913147c</changelog>
  <changelog author="msuchanek@suse.de" date="1667390406">- Refresh patches.suse/ppc64-kdump-Limit-kdump-base-to-512MB.patch
  to upstream version.
- commit 0f63234</changelog>
  <changelog author="tiwai@suse.de" date="1667476800">- ring-buffer: Check for NULL cpu_buffer in
  ring_buffer_wake_waiters() (bsc#1204705).
- commit 2e712ad</changelog>
  <changelog author="tiwai@suse.de" date="1667476801">- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
  (git-fixes).
- ALSA: usb-audio: make read-only array marker static const
  (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c
  (git-fixes).
- commit 7b36d72</changelog>
  <changelog author="tiwai@suse.de" date="1667476802">- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos
  (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-More-comprehensive-mixer-map-for-ASUS.patch.
- commit aad3dbe</changelog>
  <changelog author="tiwai@suse.de" date="1667476803">- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support
  (git-fixes).
- ALSA: scarlett2: Add support for the internal "standalone"
  switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections
  (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in
  scarlett2_usb() (git-fixes).
- commit 51a746f</changelog>
  <changelog author="tiwai@suse.de" date="1667476804">- ALSA: hiface: fix repeated words in comments (git-fixes).
- commit 1897e56</changelog>
  <changelog author="vbabka@suse.cz" date="1667476805">- Update kabi files. Refresh from Nov 2022 MU - 5.14.21-150400.24.28.1
- commit a5edbce</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1667476806">- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- commit 6f2ee60</changelog>
  <changelog author="tiwai@suse.de" date="1667563200">- blacklist.conf: add 8250_mtk entry that was reverted
- commit c43b30f</changelog>
  <changelog author="tiwai@suse.de" date="1667563201">- Move upstreamed BT fixes into sorted section
- commit 9cff1e2</changelog>
  <changelog author="tiwai@suse.de" date="1667563202">- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by
  l2cap_reassemble_sdu (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration
  (git-fixes).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- commit 9e67c0b</changelog>
  <changelog author="tiwai@suse.de" date="1667563203">- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- vsock: fix possible infinite sleep in
  vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg()
  (git-fixes).
- mISDN: fix possible memory leak in mISDN_register_device()
  (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame()
  (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in
  nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send()
  (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing
  the device (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or
  later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown
  (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being
  a V0.96 controller (git-fixes).
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into
  core (git-fixes).
- commit 356bf7e</changelog>
  <changelog author="tiwai@suse.de" date="1667563204">- x86/sev: Don't use cc_platform_has() for early SEV-SNP calls
  (bsc#1204970).
- x86/boot: Don't propagate uninitialized
  boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/compressed/64: Add identity mappings for setup_data entries
  (bsc#1204970).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Remove duplicated assignment to variable info
  (bsc#1204970).
- commit 1ad6c0c</changelog>
  <changelog author="tiwai@suse.de" date="1667563205">- Move upstreamed patches into sorted section
- commit 490afd7</changelog>
</package>
<package pkgid="bc7d1079aacbb947c985b0c39c89a1c0ce092e3333123530c8ba26e9d60cfb2d" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.33.2"/>
  <changelog author="dwagner@suse.de" date="1667390400">- scsi: lpfc: Update the obsolete adapter list (bsc#1204142).
- commit dc8f2da</changelog>
  <changelog author="tiwai@suse.de" date="1667390401">- Drop Dell Dock regression fix patch again (bsc#1204719)
  It tunred out to be bogus, a different fix is needed
- commit 2c62bb9</changelog>
  <changelog author="tiwai@suse.de" date="1667390402">- wifi: brcmfmac: Fix potential buffer overflow in
  brcmf_fweh_event_worker() (CVE-2022-3628 bsc#1204868).
- commit 968feec</changelog>
  <changelog author="tiwai@suse.de" date="1667390403">- iommu/vt-d: Do not falsely log intel_iommu is unsupported
  kernel option (bsc#1204947).
- commit 440c18c</changelog>
  <changelog author="martin.wilck@suse.com" date="1667390404">- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- commit 0d14223</changelog>
  <changelog author="vkarasulli@suse.de" date="1667390405">- Update patch references to
  patches.suse/0001-floppy-disable-FDRAWCMD-by-default.patch
  (bsc#1200692 CVE-2022-33981).
- commit 913147c</changelog>
  <changelog author="msuchanek@suse.de" date="1667390406">- Refresh patches.suse/ppc64-kdump-Limit-kdump-base-to-512MB.patch
  to upstream version.
- commit 0f63234</changelog>
  <changelog author="tiwai@suse.de" date="1667476800">- ring-buffer: Check for NULL cpu_buffer in
  ring_buffer_wake_waiters() (bsc#1204705).
- commit 2e712ad</changelog>
  <changelog author="tiwai@suse.de" date="1667476801">- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
  (git-fixes).
- ALSA: usb-audio: make read-only array marker static const
  (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c
  (git-fixes).
- commit 7b36d72</changelog>
  <changelog author="tiwai@suse.de" date="1667476802">- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos
  (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-More-comprehensive-mixer-map-for-ASUS.patch.
- commit aad3dbe</changelog>
  <changelog author="tiwai@suse.de" date="1667476803">- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support
  (git-fixes).
- ALSA: scarlett2: Add support for the internal "standalone"
  switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections
  (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in
  scarlett2_usb() (git-fixes).
- commit 51a746f</changelog>
  <changelog author="tiwai@suse.de" date="1667476804">- ALSA: hiface: fix repeated words in comments (git-fixes).
- commit 1897e56</changelog>
  <changelog author="vbabka@suse.cz" date="1667476805">- Update kabi files. Refresh from Nov 2022 MU - 5.14.21-150400.24.28.1
- commit a5edbce</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1667476806">- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- commit 6f2ee60</changelog>
  <changelog author="tiwai@suse.de" date="1667563200">- blacklist.conf: add 8250_mtk entry that was reverted
- commit c43b30f</changelog>
  <changelog author="tiwai@suse.de" date="1667563201">- Move upstreamed BT fixes into sorted section
- commit 9cff1e2</changelog>
  <changelog author="tiwai@suse.de" date="1667563202">- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by
  l2cap_reassemble_sdu (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration
  (git-fixes).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- commit 9e67c0b</changelog>
  <changelog author="tiwai@suse.de" date="1667563203">- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- vsock: fix possible infinite sleep in
  vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg()
  (git-fixes).
- mISDN: fix possible memory leak in mISDN_register_device()
  (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame()
  (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in
  nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send()
  (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing
  the device (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or
  later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown
  (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being
  a V0.96 controller (git-fixes).
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into
  core (git-fixes).
- commit 356bf7e</changelog>
  <changelog author="tiwai@suse.de" date="1667563204">- x86/sev: Don't use cc_platform_has() for early SEV-SNP calls
  (bsc#1204970).
- x86/boot: Don't propagate uninitialized
  boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/compressed/64: Add identity mappings for setup_data entries
  (bsc#1204970).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Remove duplicated assignment to variable info
  (bsc#1204970).
- commit 1ad6c0c</changelog>
  <changelog author="tiwai@suse.de" date="1667563205">- Move upstreamed patches into sorted section
- commit 490afd7</changelog>
</package>
<package pkgid="2fb4a7438c2f085e0db1ce8def4739d637c07474431bc7e0885334479a7f81a6" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.33.2"/>
  <changelog author="dwagner@suse.de" date="1667390400">- scsi: lpfc: Update the obsolete adapter list (bsc#1204142).
- commit dc8f2da</changelog>
  <changelog author="tiwai@suse.de" date="1667390401">- Drop Dell Dock regression fix patch again (bsc#1204719)
  It tunred out to be bogus, a different fix is needed
- commit 2c62bb9</changelog>
  <changelog author="tiwai@suse.de" date="1667390402">- wifi: brcmfmac: Fix potential buffer overflow in
  brcmf_fweh_event_worker() (CVE-2022-3628 bsc#1204868).
- commit 968feec</changelog>
  <changelog author="tiwai@suse.de" date="1667390403">- iommu/vt-d: Do not falsely log intel_iommu is unsupported
  kernel option (bsc#1204947).
- commit 440c18c</changelog>
  <changelog author="martin.wilck@suse.com" date="1667390404">- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- commit 0d14223</changelog>
  <changelog author="vkarasulli@suse.de" date="1667390405">- Update patch references to
  patches.suse/0001-floppy-disable-FDRAWCMD-by-default.patch
  (bsc#1200692 CVE-2022-33981).
- commit 913147c</changelog>
  <changelog author="msuchanek@suse.de" date="1667390406">- Refresh patches.suse/ppc64-kdump-Limit-kdump-base-to-512MB.patch
  to upstream version.
- commit 0f63234</changelog>
  <changelog author="tiwai@suse.de" date="1667476800">- ring-buffer: Check for NULL cpu_buffer in
  ring_buffer_wake_waiters() (bsc#1204705).
- commit 2e712ad</changelog>
  <changelog author="tiwai@suse.de" date="1667476801">- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support
  (git-fixes).
- ALSA: usb-audio: make read-only array marker static const
  (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c
  (git-fixes).
- commit 7b36d72</changelog>
  <changelog author="tiwai@suse.de" date="1667476802">- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos
  (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-More-comprehensive-mixer-map-for-ASUS.patch.
- commit aad3dbe</changelog>
  <changelog author="tiwai@suse.de" date="1667476803">- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support
  (git-fixes).
- ALSA: scarlett2: Add support for the internal "standalone"
  switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections
  (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in
  scarlett2_usb() (git-fixes).
- commit 51a746f</changelog>
  <changelog author="tiwai@suse.de" date="1667476804">- ALSA: hiface: fix repeated words in comments (git-fixes).
- commit 1897e56</changelog>
  <changelog author="vbabka@suse.cz" date="1667476805">- Update kabi files. Refresh from Nov 2022 MU - 5.14.21-150400.24.28.1
- commit a5edbce</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1667476806">- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- commit 6f2ee60</changelog>
  <changelog author="tiwai@suse.de" date="1667563200">- blacklist.conf: add 8250_mtk entry that was reverted
- commit c43b30f</changelog>
  <changelog author="tiwai@suse.de" date="1667563201">- Move upstreamed BT fixes into sorted section
- commit 9cff1e2</changelog>
  <changelog author="tiwai@suse.de" date="1667563202">- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by
  l2cap_reassemble_sdu (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration
  (git-fixes).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- commit 9e67c0b</changelog>
  <changelog author="tiwai@suse.de" date="1667563203">- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- vsock: fix possible infinite sleep in
  vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg()
  (git-fixes).
- mISDN: fix possible memory leak in mISDN_register_device()
  (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame()
  (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in
  nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send()
  (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send()
  (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send()
  (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing
  the device (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or
  later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown
  (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being
  a V0.96 controller (git-fixes).
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into
  core (git-fixes).
- commit 356bf7e</changelog>
  <changelog author="tiwai@suse.de" date="1667563204">- x86/sev: Don't use cc_platform_has() for early SEV-SNP calls
  (bsc#1204970).
- x86/boot: Don't propagate uninitialized
  boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/compressed/64: Add identity mappings for setup_data entries
  (bsc#1204970).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Remove duplicated assignment to variable info
  (bsc#1204970).
- commit 1ad6c0c</changelog>
  <changelog author="tiwai@suse.de" date="1667563205">- Move upstreamed patches into sorted section
- commit 490afd7</changelog>
</package>
<package pkgid="fb45d76c99d63c94088189918b3bc2c85f872e5f3a3971a0b90a0549bf842a1d" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.38.1"/>
  <changelog author="fdmanana@suse.com" date="1670241600">- btrfs: send: remove unused found_type parameter to
  lookup_dir_item_inode() (bsc#1206036).
- commit 7f2d376</changelog>
  <changelog author="fdmanana@suse.com" date="1670241601">- btrfs: send: remove unused type parameter to iterate_inode_ref_t
  (bsc#1206036).
- commit 0e9e4f2</changelog>
  <changelog author="lhenriques@suse.de" date="1670241602">- ceph: avoid putting the realm twice when decoding snaps fails
  (bsc#1206051).
- ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
- ceph: fix memory leak in ceph_readdir when note_last_dentry
  returns  error (bsc#1206049).
- ceph: fix inode reference leakage in ceph_get_snapdir()
  (bsc#1206048).
- ceph: do not update snapshot context when there is no new
  snapshot (bsc#1206047).
- ceph: switch netfs read ops to use rreq-&gt;inode instead of
  rreq-&gt;mapping-&gt;host (bsc#1206046).
- ceph: properly handle statfs on multifs setups (bsc#1206045).
- commit 777e847</changelog>
  <changelog author="fdmanana@suse.com" date="1670241603">- btrfs: send: refactor arguments of get_inode_info()
  (bsc#1206036).
- commit a80bf85</changelog>
  <changelog author="fdmanana@suse.com" date="1670241604">- btrfs: send: use boolean types for current inode status
  (bsc#1206036).
- commit 36f86c0</changelog>
  <changelog author="fdmanana@suse.com" date="1670241605">- btrfs: send: fix failures when processing inodes with no links
  (bsc#1206036).
- commit f017ade</changelog>
  <changelog author="fdmanana@suse.com" date="1670241606">- btrfs: send: fix send failure of a subcase of orphan inodes
  (bsc#1206036).
- commit 90cbaac</changelog>
  <changelog author="fdmanana@suse.com" date="1670241607">- btrfs: fix processing of delayed data refs during backref
  walking (bsc#1206056).
- commit 2ec426f</changelog>
  <changelog author="fdmanana@suse.com" date="1670241608">- btrfs: fix processing of delayed tree block refs during backref
  walking (bsc#1206057).
- commit 83a8ed2</changelog>
  <changelog author="jgross@suse.com" date="1670414400">- xen/netback: Ensure protocol headers don't fall in the
  non-linear area (bsc#1206113, XSA-423, CVE-2022-3643).
- commit 6c8da66</changelog>
  <changelog author="jgross@suse.com" date="1670414401">- xen/netback: don't call kfree_skb() with interrupts disabled
  (bsc#1206114, XSA-424, CVE-2022-42328, CVE-2022-42329).
- commit 90098d3</changelog>
  <changelog author="jslaby@suse.cz" date="1670414402">- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon
  resume from S3 (bsc#1206037).
- commit 6215cd5</changelog>
  <changelog author="fdmanana@suse.com" date="1670414403">- btrfs: export a helper for compression hard check (bsc#1206149).
- commit f5cf2dc</changelog>
  <changelog author="fdmanana@suse.com" date="1670414404">- btrfs: do not allow compression on nodatacow files
  (bsc#1206149).
- commit 5167f62</changelog>
  <changelog author="fdmanana@suse.com" date="1670414405">- btrfs: check if root is readonly while setting security xattr
  (bsc#1206147).
- commit 50a73ba</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1670500800">- kbuild: Unify options for BTF generation for vmlinux and modules
  (bsc#1204693).
- Refresh patches.suse/kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch
- commit 5addeac</changelog>
  <changelog author="tiwai@suse.de" date="1670587200">- macsec: add missing attribute validation for offload
  (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in
  mdio_device_release() (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in
  get_l2cap_conn() (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
  (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator
  systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization
  (git-fixes).
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
  (git-fixes).
- nilfs2: fix NULL pointer dereference in
  nilfs_palloc_commit_free_entry() (git-fixes).
- commit a0e4929</changelog>
  <changelog author="tiwai@suse.de" date="1670587201">- selftests: rtnetlink: correct xfrm policy rule in
  kci_test_ipsec_offload (git-fixes).
- vmxnet3: use correct intrConf reference when using extended
  queues (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C
  strings (git-fixes).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- commit 3a866aa</changelog>
  <changelog author="tzimmermann@suse.de" date="1670587202">- Revert "drm/vc4: hvs: Reset muxes at probe time (git-fixes)." (bsc#1202341)
  This reverts commit 303122d0f2160411fa1068220bc59849d848550d.
  The reverted change clears hardware state on the RPi4, which leaves the
  screen blank. Without it, the display works correctly.
- commit 957f968</changelog>
  <changelog author="tiwai@suse.de" date="1670587203">- Update patch reference for proc fixes (CVE-2022-4378 bsc#1206207)
- commit cab6fa7</changelog>
</package>
<package pkgid="d62a107da6a3a425b8ec7313603a6e6dbba9ec2cac4ad8dfd92d1b1e48574abe" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.24.38.1"/>
  <changelog author="fdmanana@suse.com" date="1670241600">- btrfs: send: remove unused found_type parameter to
  lookup_dir_item_inode() (bsc#1206036).
- commit 7f2d376</changelog>
  <changelog author="fdmanana@suse.com" date="1670241601">- btrfs: send: remove unused type parameter to iterate_inode_ref_t
  (bsc#1206036).
- commit 0e9e4f2</changelog>
  <changelog author="lhenriques@suse.de" date="1670241602">- ceph: avoid putting the realm twice when decoding snaps fails
  (bsc#1206051).
- ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
- ceph: fix memory leak in ceph_readdir when note_last_dentry
  returns  error (bsc#1206049).
- ceph: fix inode reference leakage in ceph_get_snapdir()
  (bsc#1206048).
- ceph: do not update snapshot context when there is no new
  snapshot (bsc#1206047).
- ceph: switch netfs read ops to use rreq-&gt;inode instead of
  rreq-&gt;mapping-&gt;host (bsc#1206046).
- ceph: properly handle statfs on multifs setups (bsc#1206045).
- commit 777e847</changelog>
  <changelog author="fdmanana@suse.com" date="1670241603">- btrfs: send: refactor arguments of get_inode_info()
  (bsc#1206036).
- commit a80bf85</changelog>
  <changelog author="fdmanana@suse.com" date="1670241604">- btrfs: send: use boolean types for current inode status
  (bsc#1206036).
- commit 36f86c0</changelog>
  <changelog author="fdmanana@suse.com" date="1670241605">- btrfs: send: fix failures when processing inodes with no links
  (bsc#1206036).
- commit f017ade</changelog>
  <changelog author="fdmanana@suse.com" date="1670241606">- btrfs: send: fix send failure of a subcase of orphan inodes
  (bsc#1206036).
- commit 90cbaac</changelog>
  <changelog author="fdmanana@suse.com" date="1670241607">- btrfs: fix processing of delayed data refs during backref
  walking (bsc#1206056).
- commit 2ec426f</changelog>
  <changelog author="fdmanana@suse.com" date="1670241608">- btrfs: fix processing of delayed tree block refs during backref
  walking (bsc#1206057).
- commit 83a8ed2</changelog>
  <changelog author="jgross@suse.com" date="1670414400">- xen/netback: Ensure protocol headers don't fall in the
  non-linear area (bsc#1206113, XSA-423, CVE-2022-3643).
- commit 6c8da66</changelog>
  <changelog author="jgross@suse.com" date="1670414401">- xen/netback: don't call kfree_skb() with interrupts disabled
  (bsc#1206114, XSA-424, CVE-2022-42328, CVE-2022-42329).
- commit 90098d3</changelog>
  <changelog author="jslaby@suse.cz" date="1670414402">- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon
  resume from S3 (bsc#1206037).
- commit 6215cd5</changelog>
  <changelog author="fdmanana@suse.com" date="1670414403">- btrfs: export a helper for compression hard check (bsc#1206149).
- commit f5cf2dc</changelog>
  <changelog author="fdmanana@suse.com" date="1670414404">- btrfs: do not allow compression on nodatacow files
  (bsc#1206149).
- commit 5167f62</changelog>
  <changelog author="fdmanana@suse.com" date="1670414405">- btrfs: check if root is readonly while setting security xattr
  (bsc#1206147).
- commit 50a73ba</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1670500800">- kbuild: Unify options for BTF generation for vmlinux and modules
  (bsc#1204693).
- Refresh patches.suse/kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch
- commit 5addeac</changelog>
  <changelog author="tiwai@suse.de" date="1670587200">- macsec: add missing attribute validation for offload
  (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in
  mdio_device_release() (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in
  get_l2cap_conn() (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
  (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator
  systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization
  (git-fixes).
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
  (git-fixes).
- nilfs2: fix NULL pointer dereference in
  nilfs_palloc_commit_free_entry() (git-fixes).
- commit a0e4929</changelog>
  <changelog author="tiwai@suse.de" date="1670587201">- selftests: rtnetlink: correct xfrm policy rule in
  kci_test_ipsec_offload (git-fixes).
- vmxnet3: use correct intrConf reference when using extended
  queues (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C
  strings (git-fixes).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- commit 3a866aa</changelog>
  <changelog author="tzimmermann@suse.de" date="1670587202">- Revert "drm/vc4: hvs: Reset muxes at probe time (git-fixes)." (bsc#1202341)
  This reverts commit 303122d0f2160411fa1068220bc59849d848550d.
  The reverted change clears hardware state on the RPi4, which leaves the
  screen blank. Without it, the display works correctly.
- commit 957f968</changelog>
  <changelog author="tiwai@suse.de" date="1670587203">- Update patch reference for proc fixes (CVE-2022-4378 bsc#1206207)
- commit cab6fa7</changelog>
</package>
<package pkgid="1d19876bc3e4ef05182197b780d36716702007ac5a680a06df28a9b542a2ff1a" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.38.1"/>
  <changelog author="fdmanana@suse.com" date="1670241600">- btrfs: send: remove unused found_type parameter to
  lookup_dir_item_inode() (bsc#1206036).
- commit 7f2d376</changelog>
  <changelog author="fdmanana@suse.com" date="1670241601">- btrfs: send: remove unused type parameter to iterate_inode_ref_t
  (bsc#1206036).
- commit 0e9e4f2</changelog>
  <changelog author="lhenriques@suse.de" date="1670241602">- ceph: avoid putting the realm twice when decoding snaps fails
  (bsc#1206051).
- ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
- ceph: fix memory leak in ceph_readdir when note_last_dentry
  returns  error (bsc#1206049).
- ceph: fix inode reference leakage in ceph_get_snapdir()
  (bsc#1206048).
- ceph: do not update snapshot context when there is no new
  snapshot (bsc#1206047).
- ceph: switch netfs read ops to use rreq-&gt;inode instead of
  rreq-&gt;mapping-&gt;host (bsc#1206046).
- ceph: properly handle statfs on multifs setups (bsc#1206045).
- commit 777e847</changelog>
  <changelog author="fdmanana@suse.com" date="1670241603">- btrfs: send: refactor arguments of get_inode_info()
  (bsc#1206036).
- commit a80bf85</changelog>
  <changelog author="fdmanana@suse.com" date="1670241604">- btrfs: send: use boolean types for current inode status
  (bsc#1206036).
- commit 36f86c0</changelog>
  <changelog author="fdmanana@suse.com" date="1670241605">- btrfs: send: fix failures when processing inodes with no links
  (bsc#1206036).
- commit f017ade</changelog>
  <changelog author="fdmanana@suse.com" date="1670241606">- btrfs: send: fix send failure of a subcase of orphan inodes
  (bsc#1206036).
- commit 90cbaac</changelog>
  <changelog author="fdmanana@suse.com" date="1670241607">- btrfs: fix processing of delayed data refs during backref
  walking (bsc#1206056).
- commit 2ec426f</changelog>
  <changelog author="fdmanana@suse.com" date="1670241608">- btrfs: fix processing of delayed tree block refs during backref
  walking (bsc#1206057).
- commit 83a8ed2</changelog>
  <changelog author="jgross@suse.com" date="1670414400">- xen/netback: Ensure protocol headers don't fall in the
  non-linear area (bsc#1206113, XSA-423, CVE-2022-3643).
- commit 6c8da66</changelog>
  <changelog author="jgross@suse.com" date="1670414401">- xen/netback: don't call kfree_skb() with interrupts disabled
  (bsc#1206114, XSA-424, CVE-2022-42328, CVE-2022-42329).
- commit 90098d3</changelog>
  <changelog author="jslaby@suse.cz" date="1670414402">- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon
  resume from S3 (bsc#1206037).
- commit 6215cd5</changelog>
  <changelog author="fdmanana@suse.com" date="1670414403">- btrfs: export a helper for compression hard check (bsc#1206149).
- commit f5cf2dc</changelog>
  <changelog author="fdmanana@suse.com" date="1670414404">- btrfs: do not allow compression on nodatacow files
  (bsc#1206149).
- commit 5167f62</changelog>
  <changelog author="fdmanana@suse.com" date="1670414405">- btrfs: check if root is readonly while setting security xattr
  (bsc#1206147).
- commit 50a73ba</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1670500800">- kbuild: Unify options for BTF generation for vmlinux and modules
  (bsc#1204693).
- Refresh patches.suse/kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch
- commit 5addeac</changelog>
  <changelog author="tiwai@suse.de" date="1670587200">- macsec: add missing attribute validation for offload
  (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in
  mdio_device_release() (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in
  get_l2cap_conn() (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
  (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator
  systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization
  (git-fixes).
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
  (git-fixes).
- nilfs2: fix NULL pointer dereference in
  nilfs_palloc_commit_free_entry() (git-fixes).
- commit a0e4929</changelog>
  <changelog author="tiwai@suse.de" date="1670587201">- selftests: rtnetlink: correct xfrm policy rule in
  kci_test_ipsec_offload (git-fixes).
- vmxnet3: use correct intrConf reference when using extended
  queues (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C
  strings (git-fixes).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- commit 3a866aa</changelog>
  <changelog author="tzimmermann@suse.de" date="1670587202">- Revert "drm/vc4: hvs: Reset muxes at probe time (git-fixes)." (bsc#1202341)
  This reverts commit 303122d0f2160411fa1068220bc59849d848550d.
  The reverted change clears hardware state on the RPi4, which leaves the
  screen blank. Without it, the display works correctly.
- commit 957f968</changelog>
  <changelog author="tiwai@suse.de" date="1670587203">- Update patch reference for proc fixes (CVE-2022-4378 bsc#1206207)
- commit cab6fa7</changelog>
</package>
<package pkgid="d0637c219e31dbd2d496d497827e80e7db3159147027ad04120ff4280754558c" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.38.1"/>
  <changelog author="fdmanana@suse.com" date="1670241600">- btrfs: send: remove unused found_type parameter to
  lookup_dir_item_inode() (bsc#1206036).
- commit 7f2d376</changelog>
  <changelog author="fdmanana@suse.com" date="1670241601">- btrfs: send: remove unused type parameter to iterate_inode_ref_t
  (bsc#1206036).
- commit 0e9e4f2</changelog>
  <changelog author="lhenriques@suse.de" date="1670241602">- ceph: avoid putting the realm twice when decoding snaps fails
  (bsc#1206051).
- ceph: allow ceph.dir.rctime xattr to be updatable (bsc#1206050).
- ceph: fix memory leak in ceph_readdir when note_last_dentry
  returns  error (bsc#1206049).
- ceph: fix inode reference leakage in ceph_get_snapdir()
  (bsc#1206048).
- ceph: do not update snapshot context when there is no new
  snapshot (bsc#1206047).
- ceph: switch netfs read ops to use rreq-&gt;inode instead of
  rreq-&gt;mapping-&gt;host (bsc#1206046).
- ceph: properly handle statfs on multifs setups (bsc#1206045).
- commit 777e847</changelog>
  <changelog author="fdmanana@suse.com" date="1670241603">- btrfs: send: refactor arguments of get_inode_info()
  (bsc#1206036).
- commit a80bf85</changelog>
  <changelog author="fdmanana@suse.com" date="1670241604">- btrfs: send: use boolean types for current inode status
  (bsc#1206036).
- commit 36f86c0</changelog>
  <changelog author="fdmanana@suse.com" date="1670241605">- btrfs: send: fix failures when processing inodes with no links
  (bsc#1206036).
- commit f017ade</changelog>
  <changelog author="fdmanana@suse.com" date="1670241606">- btrfs: send: fix send failure of a subcase of orphan inodes
  (bsc#1206036).
- commit 90cbaac</changelog>
  <changelog author="fdmanana@suse.com" date="1670241607">- btrfs: fix processing of delayed data refs during backref
  walking (bsc#1206056).
- commit 2ec426f</changelog>
  <changelog author="fdmanana@suse.com" date="1670241608">- btrfs: fix processing of delayed tree block refs during backref
  walking (bsc#1206057).
- commit 83a8ed2</changelog>
  <changelog author="jgross@suse.com" date="1670414400">- xen/netback: Ensure protocol headers don't fall in the
  non-linear area (bsc#1206113, XSA-423, CVE-2022-3643).
- commit 6c8da66</changelog>
  <changelog author="jgross@suse.com" date="1670414401">- xen/netback: don't call kfree_skb() with interrupts disabled
  (bsc#1206114, XSA-424, CVE-2022-42328, CVE-2022-42329).
- commit 90098d3</changelog>
  <changelog author="jslaby@suse.cz" date="1670414402">- x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon
  resume from S3 (bsc#1206037).
- commit 6215cd5</changelog>
  <changelog author="fdmanana@suse.com" date="1670414403">- btrfs: export a helper for compression hard check (bsc#1206149).
- commit f5cf2dc</changelog>
  <changelog author="fdmanana@suse.com" date="1670414404">- btrfs: do not allow compression on nodatacow files
  (bsc#1206149).
- commit 5167f62</changelog>
  <changelog author="fdmanana@suse.com" date="1670414405">- btrfs: check if root is readonly while setting security xattr
  (bsc#1206147).
- commit 50a73ba</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1670500800">- kbuild: Unify options for BTF generation for vmlinux and modules
  (bsc#1204693).
- Refresh patches.suse/kbuild-Add-skip_encoding_btf_enum64-option-to-pahole.patch
- commit 5addeac</changelog>
  <changelog author="tiwai@suse.de" date="1670587200">- macsec: add missing attribute validation for offload
  (git-fixes).
- net: thunderbolt: fix memory leak in tbnet_open() (git-fixes).
- mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add()
  (git-fixes).
- ca8210: Fix crash by zero initializing data (git-fixes).
- ieee802154: cc2520: Fix error return code in cc2520_hw_init()
  (git-fixes).
- net: mdio: fix unbalanced fwnode reference count in
  mdio_device_release() (git-fixes).
- NFC: nci: Bounds check struct nfc_target arrays (git-fixes).
- Bluetooth: Fix not cleanup led when bt_init fails (git-fixes).
- Bluetooth: 6LoWPAN: add missing hci_dev_put() in
  get_l2cap_conn() (git-fixes).
- e1000e: Fix TX dispatch condition (git-fixes).
- HID: core: fix shift-out-of-bounds in hid_report_raw_event
  (git-fixes).
- HID: hid-lg4ff: Add check for empty lbuf (git-fixes).
- gpio: amd8111: Fix PCI device reference count leak (git-fixes).
- ACPI: HMAT: Fix initiator registration for single-initiator
  systems (git-fixes).
- ACPI: HMAT: remove unnecessary variable initialization
  (git-fixes).
- pinctrl: intel: Save and restore pins in "direct IRQ" mode
  (git-fixes).
- nilfs2: fix NULL pointer dereference in
  nilfs_palloc_commit_free_entry() (git-fixes).
- commit a0e4929</changelog>
  <changelog author="tiwai@suse.de" date="1670587201">- selftests: rtnetlink: correct xfrm policy rule in
  kci_test_ipsec_offload (git-fixes).
- vmxnet3: use correct intrConf reference when using extended
  queues (git-fixes).
- vmxnet3: correctly report encapsulated LRO packet (git-fixes).
- proc: proc_skip_spaces() shouldn't think it is working on C
  strings (git-fixes).
- proc: avoid integer type confusion in get_proc_long (git-fixes).
- commit 3a866aa</changelog>
  <changelog author="tzimmermann@suse.de" date="1670587202">- Revert "drm/vc4: hvs: Reset muxes at probe time (git-fixes)." (bsc#1202341)
  This reverts commit 303122d0f2160411fa1068220bc59849d848550d.
  The reverted change clears hardware state on the RPi4, which leaves the
  screen blank. Without it, the display works correctly.
- commit 957f968</changelog>
  <changelog author="tiwai@suse.de" date="1670587203">- Update patch reference for proc fixes (CVE-2022-4378 bsc#1206207)
- commit cab6fa7</changelog>
</package>
<package pkgid="ed0b24dbcf04aae506c35492ce8d34e69cf1804b76c28827f12b55043ac62b1f" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.41.1"/>
  <changelog author="msuchanek@suse.de" date="1673006400">- powerpc/powernv: add missing of_node_put (bsc#1065729).
- commit 678d5a8</changelog>
  <changelog author="tiwai@suse.de" date="1673265600">- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used
  (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- thermal: int340x: Add missing attribute for data rate base
  (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow
  (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property
  (git-fixes).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  (git-fixes).
- nfc: Fix potential resource leaks (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet
  (git-fixes).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe
  (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  (git-fixes).
- commit ac1915a</changelog>
  <changelog author="palcantara@suse.de" date="1673265601">- cifs: Fix kmap_local_page() unmapping (git-fixes).
- commit ff2c079</changelog>
  <changelog author="oneukum@suse.com" date="1673438400">- blacklist.conf: misattributed, we do not have this bug
- commit bc3473d</changelog>
  <changelog author="oneukum@suse.com" date="1673438401">- blacklist.conf: too risky
- commit 51ffe7a</changelog>
  <changelog author="oneukum@suse.com" date="1673438402">- blacklist.conf: misattributed
- commit ee5f25a</changelog>
  <changelog author="msuchanek@suse.de" date="1673438403">- powerpc: Take in account addition CPU node when building kexec
  FDT (bsc#1207016 ltc#201108).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- commit 4ca3eba</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673438404">- Refresh
  patches.suse/octeontx2-Move-devlink-registration-to-be-last-devli.patch.
  Added missing hunk in backport.
- commit 9b34e71</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673438405">- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- commit 32f938b</changelog>
  <changelog author="msuchanek@suse.de" date="1673438406">- ibmveth: Always stop tx queues during close (bsc#1065729).
- commit 11e0f4a</changelog>
  <changelog author="lduncan@suse.com" date="1673438407">- blacklist.conf: add two drbd git-fixes to ignore
- commit d03d927</changelog>
  <changelog author="oneukum@suse.com" date="1673438408">- Update
  patches.suse/dmaengine-idxd-Fix-crc_val-field-for-completion-reco.patch
  (bsc#1206554).
  Added bugzilla number
- commit 1fe5012</changelog>
  <changelog author="lduncan@suse.com" date="1673438409">- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free
  device/resource/connection (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: remove usage of list iterator variable after loop
  (git-fixes).
- commit 26591d7</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524800">- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online'
  and 'ret' (bsc#1205485).
- commit bac712b</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524801">- cpufreq: ACPI: Only set boost MSRs on supported CPUs
  (bsc#1205485).
- commit 2fc91f1</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524802">- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP
  mode (bsc#1201068).
- commit 15e54a9</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673524803">- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B
  header extraction support (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow
  (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
  (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly
  (jsc#SLE-24682).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC
  (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware
  (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count
  (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures
  (jsc#SLE-24682).
- octeontx2-af: Don't reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation
  (jsc#SLE-24682).
- commit a2de709</changelog>
  <changelog author="krisman@suse.de" date="1673524804">- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault
  path (performance bsc#1203219).
- commit 82bc0ed</changelog>
  <changelog author="oneukum@suse.com" date="1673611200">- media: stv0288: use explicitly signed char (git-fixes).
- commit 72af28b</changelog>
  <changelog author="tiwai@suse.de" date="1673611201">- nfc: pn533: Wait for out_urb's completion in
  pn533_usb_send_frame() (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude
  laptops (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit
  (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from
  podxt (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
  tablet (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses
  quirk (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
  (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF
  (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  (git-fixes).
- ima: Fix a potential NULL pointer access in
  ima_restore_measurement_list (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup
  (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook
  K3402ZA/K3502ZA (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/migrate: don't check the scratch page (git-fixes).
- commit 1d4442d</changelog>
</package>
<package pkgid="25c0bfb69ca2d537a8f469a50ae06612b6b291ca40fbc255c3558f791ed6f728" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.14.21" rel="150400.24.41.1"/>
  <changelog author="msuchanek@suse.de" date="1673006400">- powerpc/powernv: add missing of_node_put (bsc#1065729).
- commit 678d5a8</changelog>
  <changelog author="tiwai@suse.de" date="1673265600">- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used
  (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- thermal: int340x: Add missing attribute for data rate base
  (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow
  (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property
  (git-fixes).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  (git-fixes).
- nfc: Fix potential resource leaks (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet
  (git-fixes).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe
  (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  (git-fixes).
- commit ac1915a</changelog>
  <changelog author="palcantara@suse.de" date="1673265601">- cifs: Fix kmap_local_page() unmapping (git-fixes).
- commit ff2c079</changelog>
  <changelog author="oneukum@suse.com" date="1673438400">- blacklist.conf: misattributed, we do not have this bug
- commit bc3473d</changelog>
  <changelog author="oneukum@suse.com" date="1673438401">- blacklist.conf: too risky
- commit 51ffe7a</changelog>
  <changelog author="oneukum@suse.com" date="1673438402">- blacklist.conf: misattributed
- commit ee5f25a</changelog>
  <changelog author="msuchanek@suse.de" date="1673438403">- powerpc: Take in account addition CPU node when building kexec
  FDT (bsc#1207016 ltc#201108).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- commit 4ca3eba</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673438404">- Refresh
  patches.suse/octeontx2-Move-devlink-registration-to-be-last-devli.patch.
  Added missing hunk in backport.
- commit 9b34e71</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673438405">- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- commit 32f938b</changelog>
  <changelog author="msuchanek@suse.de" date="1673438406">- ibmveth: Always stop tx queues during close (bsc#1065729).
- commit 11e0f4a</changelog>
  <changelog author="lduncan@suse.com" date="1673438407">- blacklist.conf: add two drbd git-fixes to ignore
- commit d03d927</changelog>
  <changelog author="oneukum@suse.com" date="1673438408">- Update
  patches.suse/dmaengine-idxd-Fix-crc_val-field-for-completion-reco.patch
  (bsc#1206554).
  Added bugzilla number
- commit 1fe5012</changelog>
  <changelog author="lduncan@suse.com" date="1673438409">- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free
  device/resource/connection (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: remove usage of list iterator variable after loop
  (git-fixes).
- commit 26591d7</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524800">- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online'
  and 'ret' (bsc#1205485).
- commit bac712b</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524801">- cpufreq: ACPI: Only set boost MSRs on supported CPUs
  (bsc#1205485).
- commit 2fc91f1</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524802">- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP
  mode (bsc#1201068).
- commit 15e54a9</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673524803">- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B
  header extraction support (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow
  (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
  (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly
  (jsc#SLE-24682).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC
  (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware
  (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count
  (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures
  (jsc#SLE-24682).
- octeontx2-af: Don't reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation
  (jsc#SLE-24682).
- commit a2de709</changelog>
  <changelog author="krisman@suse.de" date="1673524804">- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault
  path (performance bsc#1203219).
- commit 82bc0ed</changelog>
  <changelog author="oneukum@suse.com" date="1673611200">- media: stv0288: use explicitly signed char (git-fixes).
- commit 72af28b</changelog>
  <changelog author="tiwai@suse.de" date="1673611201">- nfc: pn533: Wait for out_urb's completion in
  pn533_usb_send_frame() (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude
  laptops (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit
  (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from
  podxt (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
  tablet (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses
  quirk (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
  (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF
  (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  (git-fixes).
- ima: Fix a potential NULL pointer access in
  ima_restore_measurement_list (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup
  (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook
  K3402ZA/K3502ZA (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/migrate: don't check the scratch page (git-fixes).
- commit 1d4442d</changelog>
</package>
<package pkgid="bab5c280a19cd16830f5b3fad348458c736d54db8ecaa28c9dbb364f26d9c57b" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.41.1"/>
  <changelog author="msuchanek@suse.de" date="1673006400">- powerpc/powernv: add missing of_node_put (bsc#1065729).
- commit 678d5a8</changelog>
  <changelog author="tiwai@suse.de" date="1673265600">- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used
  (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- thermal: int340x: Add missing attribute for data rate base
  (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow
  (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property
  (git-fixes).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  (git-fixes).
- nfc: Fix potential resource leaks (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet
  (git-fixes).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe
  (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  (git-fixes).
- commit ac1915a</changelog>
  <changelog author="palcantara@suse.de" date="1673265601">- cifs: Fix kmap_local_page() unmapping (git-fixes).
- commit ff2c079</changelog>
  <changelog author="oneukum@suse.com" date="1673438400">- blacklist.conf: misattributed, we do not have this bug
- commit bc3473d</changelog>
  <changelog author="oneukum@suse.com" date="1673438401">- blacklist.conf: too risky
- commit 51ffe7a</changelog>
  <changelog author="oneukum@suse.com" date="1673438402">- blacklist.conf: misattributed
- commit ee5f25a</changelog>
  <changelog author="msuchanek@suse.de" date="1673438403">- powerpc: Take in account addition CPU node when building kexec
  FDT (bsc#1207016 ltc#201108).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- commit 4ca3eba</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673438404">- Refresh
  patches.suse/octeontx2-Move-devlink-registration-to-be-last-devli.patch.
  Added missing hunk in backport.
- commit 9b34e71</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673438405">- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- commit 32f938b</changelog>
  <changelog author="msuchanek@suse.de" date="1673438406">- ibmveth: Always stop tx queues during close (bsc#1065729).
- commit 11e0f4a</changelog>
  <changelog author="lduncan@suse.com" date="1673438407">- blacklist.conf: add two drbd git-fixes to ignore
- commit d03d927</changelog>
  <changelog author="oneukum@suse.com" date="1673438408">- Update
  patches.suse/dmaengine-idxd-Fix-crc_val-field-for-completion-reco.patch
  (bsc#1206554).
  Added bugzilla number
- commit 1fe5012</changelog>
  <changelog author="lduncan@suse.com" date="1673438409">- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free
  device/resource/connection (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: remove usage of list iterator variable after loop
  (git-fixes).
- commit 26591d7</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524800">- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online'
  and 'ret' (bsc#1205485).
- commit bac712b</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524801">- cpufreq: ACPI: Only set boost MSRs on supported CPUs
  (bsc#1205485).
- commit 2fc91f1</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524802">- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP
  mode (bsc#1201068).
- commit 15e54a9</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673524803">- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B
  header extraction support (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow
  (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
  (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly
  (jsc#SLE-24682).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC
  (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware
  (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count
  (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures
  (jsc#SLE-24682).
- octeontx2-af: Don't reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation
  (jsc#SLE-24682).
- commit a2de709</changelog>
  <changelog author="krisman@suse.de" date="1673524804">- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault
  path (performance bsc#1203219).
- commit 82bc0ed</changelog>
  <changelog author="oneukum@suse.com" date="1673611200">- media: stv0288: use explicitly signed char (git-fixes).
- commit 72af28b</changelog>
  <changelog author="tiwai@suse.de" date="1673611201">- nfc: pn533: Wait for out_urb's completion in
  pn533_usb_send_frame() (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude
  laptops (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit
  (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from
  podxt (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
  tablet (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses
  quirk (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
  (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF
  (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  (git-fixes).
- ima: Fix a potential NULL pointer access in
  ima_restore_measurement_list (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup
  (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook
  K3402ZA/K3502ZA (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/migrate: don't check the scratch page (git-fixes).
- commit 1d4442d</changelog>
</package>
<package pkgid="52e15b352d47852279a21971233bbaca6d822abb808cdc4f58f0694a006c20e7" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.41.1"/>
  <changelog author="msuchanek@suse.de" date="1673006400">- powerpc/powernv: add missing of_node_put (bsc#1065729).
- commit 678d5a8</changelog>
  <changelog author="tiwai@suse.de" date="1673265600">- Revert "usb: ulpi: defer ulpi_register on ulpi_read_id timeout"
  (git-fixes).
- drm/i915/gvt: fix vgpu debugfs clean in remove (git-fixes).
- drm/i915/gvt: fix gvt debugfs destroy (git-fixes).
- drm/i915: unpin on error in intel_vgpu_shadow_mm_pin()
  (git-fixes).
- drm/imx: ipuv3-plane: Fix overlay plane width (git-fixes).
- drm/meson: Reduce the FIFO lines held when AFBC is not used
  (git-fixes).
- drm/panfrost: Fix GEM handle creation ref-counting (git-fixes).
- thermal: int340x: Add missing attribute for data rate base
  (git-fixes).
- caif: fix memory leak in cfctrl_linkup_request() (git-fixes).
- usb: rndis_host: Secure rndis_query check against int overflow
  (git-fixes).
- dt-bindings: net: sun8i-emac: Add phy-supply property
  (git-fixes).
- net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe
  (git-fixes).
- nfc: Fix potential resource leaks (git-fixes).
- vmxnet3: correctly report csum_level for encapsulated packet
  (git-fixes).
- gpio: sifive: Fix refcount leak in sifive_gpio_probe
  (git-fixes).
- fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB
  (git-fixes).
- commit ac1915a</changelog>
  <changelog author="palcantara@suse.de" date="1673265601">- cifs: Fix kmap_local_page() unmapping (git-fixes).
- commit ff2c079</changelog>
  <changelog author="oneukum@suse.com" date="1673438400">- blacklist.conf: misattributed, we do not have this bug
- commit bc3473d</changelog>
  <changelog author="oneukum@suse.com" date="1673438401">- blacklist.conf: too risky
- commit 51ffe7a</changelog>
  <changelog author="oneukum@suse.com" date="1673438402">- blacklist.conf: misattributed
- commit ee5f25a</changelog>
  <changelog author="msuchanek@suse.de" date="1673438403">- powerpc: Take in account addition CPU node when building kexec
  FDT (bsc#1207016 ltc#201108).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- commit 4ca3eba</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673438404">- Refresh
  patches.suse/octeontx2-Move-devlink-registration-to-be-last-devli.patch.
  Added missing hunk in backport.
- commit 9b34e71</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673438405">- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- commit 32f938b</changelog>
  <changelog author="msuchanek@suse.de" date="1673438406">- ibmveth: Always stop tx queues during close (bsc#1065729).
- commit 11e0f4a</changelog>
  <changelog author="lduncan@suse.com" date="1673438407">- blacklist.conf: add two drbd git-fixes to ignore
- commit d03d927</changelog>
  <changelog author="oneukum@suse.com" date="1673438408">- Update
  patches.suse/dmaengine-idxd-Fix-crc_val-field-for-completion-reco.patch
  (bsc#1206554).
  Added bugzilla number
- commit 1fe5012</changelog>
  <changelog author="lduncan@suse.com" date="1673438409">- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free
  device/resource/connection (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: remove usage of list iterator variable after loop
  (git-fixes).
- commit 26591d7</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524800">- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online'
  and 'ret' (bsc#1205485).
- commit bac712b</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524801">- cpufreq: ACPI: Only set boost MSRs on supported CPUs
  (bsc#1205485).
- commit 2fc91f1</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524802">- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP
  mode (bsc#1201068).
- commit 15e54a9</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673524803">- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B
  header extraction support (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow
  (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
  (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly
  (jsc#SLE-24682).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC
  (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware
  (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count
  (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures
  (jsc#SLE-24682).
- octeontx2-af: Don't reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation
  (jsc#SLE-24682).
- commit a2de709</changelog>
  <changelog author="krisman@suse.de" date="1673524804">- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault
  path (performance bsc#1203219).
- commit 82bc0ed</changelog>
  <changelog author="oneukum@suse.com" date="1673611200">- media: stv0288: use explicitly signed char (git-fixes).
- commit 72af28b</changelog>
  <changelog author="tiwai@suse.de" date="1673611201">- nfc: pn533: Wait for out_urb's completion in
  pn533_usb_send_frame() (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude
  laptops (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit
  (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from
  podxt (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
  tablet (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses
  quirk (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
  (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF
  (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  (git-fixes).
- ima: Fix a potential NULL pointer access in
  ima_restore_measurement_list (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup
  (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook
  K3402ZA/K3502ZA (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/migrate: don't check the scratch page (git-fixes).
- commit 1d4442d</changelog>
</package>
<package pkgid="2da5851074942c962f23ad4f56f78b460a5bf9d83571c2395cab93e4945bdb92" name="cluster-md-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="b68425bc8aacaa4caddbf1f96823b0093fab40f9263884daae834211b7bf32e2" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="afa3c1930d8c89bb0f4e17609f2ff08dde404ea961a2c162b6cbe4ef5c55ff8d" name="cluster-md-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.71.2"/>
  <changelog author="tiwai@suse.de" date="1654344000">- gpio: adp5588: Remove support for platform setup and teardown
  callbacks (git-fixes).
- gpio: pca953x: use the correct register address to do regcache
  sync (git-fixes).
- driver core: fix deadlock in __device_attach (git-fixes).
- driver: base: fix UAF when driver_attach failed (git-fixes).
- selftests: firmware: Use smaller dictionary for XZ compression
  (git-fixes).
- bus: ti-sysc: Fix warnings for unbind for serial (git-fixes).
- firmware: dmi-sysfs: Fix memory leak in
  dmi_sysfs_register_handle (git-fixes).
- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
  (git-fixes).
- phy: qcom-qmp: fix reset-controller leak on probe errors
  (git-fixes).
- phy: qcom-qmp: fix struct clk leak on probe errors (git-fixes).
- iio: adc: sc27xx: Fine tune the scale calibration values
  (git-fixes).
- iio: adc: sc27xx: fix read big scale voltage not right
  (git-fixes).
- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return
  value check (git-fixes).
- iio: adc: ad7124: Remove shift from scan_type (git-fixes).
- firmware: stratix10-svc: fix a missing check on list iterator
  (git-fixes).
- usb: ehci-omap: drop unused ehci_read() function (git-fixes).
- usb: typec: mux: Check dev_set_name() return value (git-fixes).
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
  (git-fixes).
- usb: musb: Fix missing of_node_put() in omap2430_probe
  (git-fixes).
- USB: storage: karma: fix rio_karma_init return (git-fixes).
- usb: usbip: add missing device lock on tweak configuration cmd
  (git-fixes).
- usb: usbip: fix a refcount leak in stub_probe() (git-fixes).
- serial: stm32-usart: Correct CSIZE, bits, and parity
  (git-fixes).
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
  (git-fixes).
- serial: sifive: Sanitize CSIZE and c_iflag (git-fixes).
- serial: sh-sci: Don't allow CS5-6 (git-fixes).
- serial: txx9: Don't allow CS5-6 (git-fixes).
- serial: rda-uart: Don't allow CS5-6 (git-fixes).
- serial: digicolor-usart: Don't allow CS5-6 (git-fixes).
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
  (git-fixes).
- serial: meson: acquire port-&gt;lock in startup() (git-fixes).
- serial: pch: don't overwrite xmit-&gt;buf[0] by x_char (git-fixes).
- serial: 8250: pxa: Remove unneeded &lt;linux/pm_runtime.h&gt;
  (git-fixes).
- serial: 8250: core: Remove unneeded &lt;linux/pm_runtime.h&gt;
  (git-fixes).
- tty: serial: fsl_lpuart: fix potential bug when using both
  of_alias_get_id and ida_simple_get (git-fixes).
- tty: serial: owl: Fix missing clk_disable_unprepare() in
  owl_uart_probe (git-fixes).
- tty: goldfish: Use tty_port_destroy() to destroy port
  (git-fixes).
- staging: fieldbus: Fix the error handling path in
  anybuss_host_common_probe() (git-fixes).
- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition (git-fixes).
- commit e15e5e6</changelog>
  <changelog author="tiwai@suse.de" date="1654344001">- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
  (git-fixes).
- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15
  9520 laptop (git-fixes).
- ALSA: hda/realtek - Add new type for ALC245 (git-fixes).
- ASoC: rt5514: Fix event generation for "DSP Voice Wake Up"
  control (git-fixes).
- ALSA: ctxfi: Add SB046x PCI ID (git-fixes).
- commit f5268ed</changelog>
  <changelog author="tiwai@suse.de" date="1654344002">- netdevice: demote the type of some dev_addr_set() helpers
  (bsc#1200216).
- commit eaa7009</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516800">- net: hns3: fix kernel crash when unload VF while it is being reset (git-fixes).
- commit 5655db7</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516801">- ice: Fix race conditions between virtchnl handling and VF ndo ops (git-fixes).
- commit ecd49f2</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516802">- net: korina: fix return value (git-fixes).
- commit 2399b03</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516803">- qlcnic: Fix error code in probe (git-fixes).
- commit 34dcd67</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516804">- net: ethernet: Fix memleak in ethoc_probe (git-fixes).
- commit b06c831</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516805">- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (git-fixes).
- commit de37b40</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516806">- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (git-fixes).
- commit dd8afe7</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516807">- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (git-fixes).
- commit ac2aae4</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516808">- net: stmmac: dwmac-sun8i: Fix probe error handling (git-fixes).
- commit b7d0c5f</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516809">- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (git-fixes).
- commit 5ddd111</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516810">- net: stmmac: dwmac-sun8i: Balance internal PHY power (git-fixes).
- commit a293be9</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516811">- net: stmmac: dwmac-sun8i: Balance syscon (de)initialization (git-fixes).
- commit 3c1ac51</changelog>
  <changelog author="jack@suse.cz" date="1654516812">- jbd2: Fake symbols defined under CONFIG_JBD2_DEBUG
  (bsc#1198971).
- Update config files to disable mistakenly enabled CONFIG_JBD2_DEBUG
- commit 1c1f326</changelog>
  <changelog author="lduncan@suse.com" date="1654516813">- Added blacklist git-fix: just fixes compiler warning but breaks kabi
- commit 2f740d4</changelog>
  <changelog author="lduncan@suse.com" date="1654516814">- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
  (git-fixes).
- scsi: dc395x: Fix a missing check on list iterator (git-fixes).
- scsi: ufs: core: Exclude UECxx from SFR dump list (git-fixes).
- scsi: ufs: qcom: Fix ufs_qcom_resume() (git-fixes).
- drbd: fix duplicate array initializer (git-fixes).
- drbd: use bdev_alignment_offset instead of
  queue_alignment_offset (git-fixes).
- drbd: use bdev based limit helpers in drbd_send_sizes
  (git-fixes).
- drbd: remove assign_p_sizes_qlim (git-fixes).
- commit d165ee8</changelog>
  <changelog author="mkubecek@suse.cz" date="1654603200">- netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  (CVE-2022-1972 bsc#1200019).
- commit 323e166</changelog>
  <changelog author="ohering@suse.de" date="1654603201">- add mainline tag for a pci-hyperv change
- commit 77f42e9</changelog>
</package>
<package pkgid="717c809722fecd3fd6659f1301046066f627b0c4829f74dd26bd04f96760d655" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.71.2"/>
  <changelog author="tiwai@suse.de" date="1654344000">- gpio: adp5588: Remove support for platform setup and teardown
  callbacks (git-fixes).
- gpio: pca953x: use the correct register address to do regcache
  sync (git-fixes).
- driver core: fix deadlock in __device_attach (git-fixes).
- driver: base: fix UAF when driver_attach failed (git-fixes).
- selftests: firmware: Use smaller dictionary for XZ compression
  (git-fixes).
- bus: ti-sysc: Fix warnings for unbind for serial (git-fixes).
- firmware: dmi-sysfs: Fix memory leak in
  dmi_sysfs_register_handle (git-fixes).
- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure
  (git-fixes).
- phy: qcom-qmp: fix reset-controller leak on probe errors
  (git-fixes).
- phy: qcom-qmp: fix struct clk leak on probe errors (git-fixes).
- iio: adc: sc27xx: Fine tune the scale calibration values
  (git-fixes).
- iio: adc: sc27xx: fix read big scale voltage not right
  (git-fixes).
- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return
  value check (git-fixes).
- iio: adc: ad7124: Remove shift from scan_type (git-fixes).
- firmware: stratix10-svc: fix a missing check on list iterator
  (git-fixes).
- usb: ehci-omap: drop unused ehci_read() function (git-fixes).
- usb: typec: mux: Check dev_set_name() return value (git-fixes).
- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking
  (git-fixes).
- usb: musb: Fix missing of_node_put() in omap2430_probe
  (git-fixes).
- USB: storage: karma: fix rio_karma_init return (git-fixes).
- usb: usbip: add missing device lock on tweak configuration cmd
  (git-fixes).
- usb: usbip: fix a refcount leak in stub_probe() (git-fixes).
- serial: stm32-usart: Correct CSIZE, bits, and parity
  (git-fixes).
- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7
  (git-fixes).
- serial: sifive: Sanitize CSIZE and c_iflag (git-fixes).
- serial: sh-sci: Don't allow CS5-6 (git-fixes).
- serial: txx9: Don't allow CS5-6 (git-fixes).
- serial: rda-uart: Don't allow CS5-6 (git-fixes).
- serial: digicolor-usart: Don't allow CS5-6 (git-fixes).
- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485
  (git-fixes).
- serial: meson: acquire port-&gt;lock in startup() (git-fixes).
- serial: pch: don't overwrite xmit-&gt;buf[0] by x_char (git-fixes).
- serial: 8250: pxa: Remove unneeded &lt;linux/pm_runtime.h&gt;
  (git-fixes).
- serial: 8250: core: Remove unneeded &lt;linux/pm_runtime.h&gt;
  (git-fixes).
- tty: serial: fsl_lpuart: fix potential bug when using both
  of_alias_get_id and ida_simple_get (git-fixes).
- tty: serial: owl: Fix missing clk_disable_unprepare() in
  owl_uart_probe (git-fixes).
- tty: goldfish: Use tty_port_destroy() to destroy port
  (git-fixes).
- staging: fieldbus: Fix the error handling path in
  anybuss_host_common_probe() (git-fixes).
- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition (git-fixes).
- commit e15e5e6</changelog>
  <changelog author="tiwai@suse.de" date="1654344001">- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS
  (git-fixes).
- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15
  9520 laptop (git-fixes).
- ALSA: hda/realtek - Add new type for ALC245 (git-fixes).
- ASoC: rt5514: Fix event generation for "DSP Voice Wake Up"
  control (git-fixes).
- ALSA: ctxfi: Add SB046x PCI ID (git-fixes).
- commit f5268ed</changelog>
  <changelog author="tiwai@suse.de" date="1654344002">- netdevice: demote the type of some dev_addr_set() helpers
  (bsc#1200216).
- commit eaa7009</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516800">- net: hns3: fix kernel crash when unload VF while it is being reset (git-fixes).
- commit 5655db7</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516801">- ice: Fix race conditions between virtchnl handling and VF ndo ops (git-fixes).
- commit ecd49f2</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516802">- net: korina: fix return value (git-fixes).
- commit 2399b03</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516803">- qlcnic: Fix error code in probe (git-fixes).
- commit 34dcd67</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516804">- net: ethernet: Fix memleak in ethoc_probe (git-fixes).
- commit b06c831</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516805">- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (git-fixes).
- commit de37b40</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516806">- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (git-fixes).
- commit dd8afe7</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516807">- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (git-fixes).
- commit ac2aae4</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516808">- net: stmmac: dwmac-sun8i: Fix probe error handling (git-fixes).
- commit b7d0c5f</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516809">- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (git-fixes).
- commit 5ddd111</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516810">- net: stmmac: dwmac-sun8i: Balance internal PHY power (git-fixes).
- commit a293be9</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1654516811">- net: stmmac: dwmac-sun8i: Balance syscon (de)initialization (git-fixes).
- commit 3c1ac51</changelog>
  <changelog author="jack@suse.cz" date="1654516812">- jbd2: Fake symbols defined under CONFIG_JBD2_DEBUG
  (bsc#1198971).
- Update config files to disable mistakenly enabled CONFIG_JBD2_DEBUG
- commit 1c1f326</changelog>
  <changelog author="lduncan@suse.com" date="1654516813">- Added blacklist git-fix: just fixes compiler warning but breaks kabi
- commit 2f740d4</changelog>
  <changelog author="lduncan@suse.com" date="1654516814">- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled
  (git-fixes).
- scsi: dc395x: Fix a missing check on list iterator (git-fixes).
- scsi: ufs: core: Exclude UECxx from SFR dump list (git-fixes).
- scsi: ufs: qcom: Fix ufs_qcom_resume() (git-fixes).
- drbd: fix duplicate array initializer (git-fixes).
- drbd: use bdev_alignment_offset instead of
  queue_alignment_offset (git-fixes).
- drbd: use bdev based limit helpers in drbd_send_sizes
  (git-fixes).
- drbd: remove assign_p_sizes_qlim (git-fixes).
- commit d165ee8</changelog>
  <changelog author="mkubecek@suse.cz" date="1654603200">- netfilter: nf_tables: sanitize nft_set_desc_concat_parse()
  (CVE-2022-1972 bsc#1200019).
- commit 323e166</changelog>
  <changelog author="ohering@suse.de" date="1654603201">- add mainline tag for a pci-hyperv change
- commit 77f42e9</changelog>
</package>
<package pkgid="02d729e2576dfb516d9fa3f5d4e88b40cbbd572d6718c84f9191bf75342a7bf2" name="cluster-md-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.76.1"/>
  <changelog author="jgross@suse.com" date="1654862400">- kvm: fix wrong exception emulation in check_rdtsc (git-fixes).
- commit 5797afc</changelog>
  <changelog author="jgross@suse.com" date="1654862401">- KVM: nVMX: Query current VMCS when determining if MSR bitmaps
  are in use (git-fixes).
- commit d008aa3</changelog>
  <changelog author="jgross@suse.com" date="1654862402">- KVM: x86: Fix emulation in writing cr8 (git-fixes).
- commit a28f4e5</changelog>
  <changelog author="jgross@suse.com" date="1654862403">- KVM: x86/emulator: Defer not-present segment check in
  __load_segment_descriptor() (git-fixes).
- commit 27bee90</changelog>
  <changelog author="jgross@suse.com" date="1654862404">- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has
  architectural PMU (git-fixes).
- commit b46bf26</changelog>
  <changelog author="ohering@suse.de" date="1655121600">- PCI: hv: Fix NUMA node assignment when kernel boots with custom
  NUMA topology (bsc#1199365).
- commit 533234b</changelog>
  <changelog author="jack@suse.cz" date="1655121601">- blk-mq: fix tag_get wait task can't be awakened (bsc#1200263).
- commit 0a1fb57</changelog>
  <changelog author="jack@suse.cz" date="1655121602">- blk-mq: Fix wrong wakeup batch configuration which will cause
  hang (bsc#1200263).
- commit d25a54b</changelog>
  <changelog author="osalvador@suse.de" date="1655208000">- Rename colliding patches before the next origin/cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 070ca14</changelog>
  <changelog author="neilb@suse.de" date="1655208001">- NFS: Don't report ENOSPC write errors twice (git-fixes).
- nfsd: Fix null-ptr-deref in nfsd_fill_super() (git-fixes).
- md: fix an incorrect NULL check in md_reload_sb (git-fixes).
- md: fix an incorrect NULL check in does_sb_need_changing
  (git-fixes).
- raid5: introduce MD_BROKEN (git-fixes).
- commit a49fc21</changelog>
  <changelog author="ptesarik@suse.cz" date="1655208002">- s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST
  flag (git-fixes).
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
  (git-fixes).
- s390/lcs: fix variable dereferenced before check (git-fixes).
- s390/ctcm: fix potential memory leak (git-fixes).
- s390/ctcm: fix variable dereferenced before check (git-fixes).
- s390/dasd: Fix read inconsistency for ESE DASD devices
  (bsc#1200206 LTC#198455).
- s390/dasd: Fix read for ESE with blksize &lt; 4k (bsc#1200206
  LTC#198455).
- s390/dasd: prevent double format of tracks for ESE devices
  (bsc#1200207 LTC#198454).
- s390/dasd: fix data corruption for ESE devices (bsc#1200207
  LTC#198454).
- KVM: s390: vsie/gmap: reduce gmap_rmap overhead (git-fixes).
- s390/nmi: handle vector validity failures for KVM guests
  (git-fixes).
- s390/nmi: handle guarded storage validity failures for KVM
  guests (git-fixes).
- vfio/ccw: Remove unneeded GFP_DMA (git-fixes).
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm (git-fixes).
- KVM: s390: pv: avoid double free of sida page (git-fixes).
- KVM: s390: pv: add macros for UVC CC values (git-fixes).
- s390: fix strrchr() implementation (git-fixes).
- s390/pv: fix the forcing of the swiotlb (git-fixes).
- s390/qdio: cancel the ESTABLISH ccw after timeout (git-fixes).
- s390/qdio: fix roll-back after timeout on ESTABLISH ccw
  (git-fixes).
- s390/ftrace: fix ftrace_update_ftrace_func implementation
  (git-fixes).
- s390/cio: dont call css_wait_for_slow_path() inside a lock
  (git-fixes).
- s390/cio: Fix the "type" field in s390_cio_tpi tracepoint
  (git-fixes).
- s390/mcck: fix invalid KVM guest condition check (git-fixes).
- vfio-ccw: Check initialized flag in cp_init() (git-fixes).
- s390: fix detection of vector enhancements facility 1 vs. vector
  packed decimal facility (git-fixes).
- s390/vfio-ap: fix circular lockdep when setting/clearing crypto
  masks (git-fixes).
- virtio/s390: implement virtio-ccw revision 2 correctly
  (git-fixes).
- commit 61a09d5</changelog>
  <changelog author="osalvador@suse.de" date="1655208003">- Update config files
- commit 0d6e862</changelog>
  <changelog author="oneukum@suse.com" date="1655208004">- platform/x86: wmi: Replace read_takes_no_args with a flags field
  (git-fixes).
- commit 2771a0e</changelog>
  <changelog author="oneukum@suse.com" date="1655208005">- platform/x86: wmi: Fix driver-&gt;notify() vs -&gt;probe() race
  (git-fixes).
- commit e932131</changelog>
  <changelog author="osalvador@suse.de" date="1655208006">- Refresh 0002-PKCS-7-Check-codeSigning-EKU-for-kernel-module-and-k.patch
- commit 4835ae7</changelog>
  <changelog author="tiwai@suse.de" date="1655294400">- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
  (git-fixes).
- ALSA: hda/conexant - Fix loopback issue with CX20632
  (git-fixes).
- ALSA: usb-audio: Set up (implicit) sync for Saffire 6
  (git-fixes).
- ALSA: usb-audio: Skip generic sync EP parse for secondary EP
  (git-fixes).
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map()
  return value (git-fixes).
- clocksource/drivers/sp804: Avoid error on multiple instances
  (git-fixes).
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size
  data type (git-fixes).
- ASoC: max98357a: remove dependency on GPIOLIB (git-fixes).
- ASoC: rt5645: Fix errorenous cleanup order (git-fixes).
- ASoC: tscs454: Add endianness flag in snd_soc_component_driver
  (git-fixes).
- ASoC: dapm: Don't fold register value changes into notifications
  (git-fixes).
- ALSA: usb-audio: Workaround for clock setup on TEAC devices
  (git-fixes).
- ath9k: fix QCA9561 PA bias level (git-fixes).
- b43: Fix assigning negative value to unsigned variable
  (git-fixes).
- b43legacy: Fix assigning negative value to unsigned variable
  (git-fixes).
- ACPI: sysfs: Fix BERT error region memory mapping (git-fixes).
- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
  (git-fixes).
- cfg80211: set custom regdomain after wiphy registration
  (git-fixes).
- ACPI: sysfs: Make sparse happy about address space in use
  (git-fixes).
- commit d8922a7</changelog>
  <changelog author="tiwai@suse.de" date="1655294401">- drm/atomic: Force bridge self-refresh-exit on CRTC switch
  (git-fixes).
- drm/bridge: analogix_dp: Support PSR-exit to disable transition
  (git-fixes).
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
  (git-fixes).
- iio: dummy: iio_simple_dummy: check the return value of
  kstrdup() (git-fixes).
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour
  (git-fixes).
- drm/radeon: fix a possible null pointer dereference (git-fixes).
- i2c: cadence: Increase timeout per message if necessary
  (git-fixes).
- drm/amdgpu/ucode: Remove firmware load type check in
  amdgpu_ucode_free_bo (git-fixes).
- drm: msm: fix error check return value of irq_of_parse_and_map()
  (git-fixes).
- drm/plane: Move range check for format_count earlier
  (git-fixes).
- drm/komeda: return early if drm_universal_plane_init() fails
  (git-fixes).
- fbcon: Consistently protect deferred_takeover with
  console_lock() (git-fixes).
- drm/virtio: fix NULL pointer dereference in
  virtio_gpu_conn_get_modes (git-fixes).
- drm/i915: Fix -Wstringop-overflow warning in call to
  intel_read_wm_latency() (git-fixes).
- iwlwifi: mvm: fix assert 1F04 upon reconfig (git-fixes).
- mac80211: upgrade passive scan to active scan on DFS channels
  after beacon rx (git-fixes).
- ipw2x00: Fix potential NULL dereference in libipw_xmit()
  (git-fixes).
- HID: bigben: fix slab-out-of-bounds Write in bigben_probe
  (git-fixes).
- HID: multitouch: Add support for Google Whiskers Touchpad
  (git-fixes).
- hwmon: Make chip parameter for with_info API mandatory
  (git-fixes).
- irqchip: irq-xtensa-mx: fix initial IRQ affinity (git-fixes).
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow
  on A375, A38x, A39x (git-fixes).
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
  (git-fixes).
- irqchip/exiu: Fix acknowledgment of edge triggered interrupts
  (git-fixes).
- efi: Add missing prototype for efi_capsule_setup_info
  (git-fixes).
- drivers: i2c: thunderx: Allow driver to work with ACPI defined
  TWSI controllers (git-fixes).
- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging
  (git-fixes).
- Input: goodix - fix spurious key release events (git-fixes).
- commit 71b82f0</changelog>
  <changelog author="tiwai@suse.de" date="1655294402">- efi: Do not import certificates from UEFI Secure Boot for T2
  Macs (git-fixes).
- Refresh
  patches.suse/0003-MODSIGN-load-blacklist-from-MOKx.patch.
- commit 316d54d</changelog>
  <changelog author="tiwai@suse.de" date="1655294403">- vringh: Fix loop descriptors check in the indirect cases
  (git-fixes).
- mmc: block: Fix CQE recovery reset success (git-fixes).
- modpost: fix undefined behavior of is_arm_mapping_symbol()
  (git-fixes).
- modpost: fix removing numeric suffixes (git-fixes).
- misc: rtsx: set NULL intfdata when probe fails (git-fixes).
- USB: new quirk for Dell Gen 2 devices (git-fixes).
- USB: serial: option: add Quectel BG95 modem (git-fixes).
- usb: core: hcd: Add support for deferring roothub registration
  (git-fixes).
- usb: dwc2: gadget: don't reset gadget's driver-&gt;bus (git-fixes).
- USB: hcd-pci: Fully suspend across freeze/thaw cycle
  (git-fixes).
- drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  (git-fixes).
- USB: host: isp116x: check return value after calling
  platform_get_resource() (git-fixes).
- serial: msm_serial: disable interrupts in __msm_console_write()
  (git-fixes).
- drivers: tty: serial: Fix deadlock in sa1100_set_termios()
  (git-fixes).
- tty: Fix a possible resource leak in icom_probe (git-fixes).
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
  (git-fixes).
- staging: rtl8712: fix uninit-value in r871xu_drv_init()
  (git-fixes).
- staging: rtl8712: fix uninit-value in usb_read8() and friends
  (git-fixes).
- drivers: staging: rtl8192e: Fix deadlock in
  rtllib_beacons_stop() (git-fixes).
- drivers: staging: rtl8192u: Fix deadlock in
  ieee80211_beacons_stop() (git-fixes).
- watchdog: wdat_wdt: Stop watchdog when rebooting the system
  (git-fixes).
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards (git-fixes).
- video: fbdev: pxa3xx-gcu: release the resources correctly in
  pxa3xx_gcu_probe/remove() (git-fixes).
- rtlwifi: Use pr_warn instead of WARN_ONCE (git-fixes).
- rtl818x: Prevent using not initialized queues (git-fixes).
- mwifiex: add mutex lock for call in
  mwifiex_dfs_chan_sw_work_queue (git-fixes).
- media: cx25821: Fix the warning when removing the module
  (git-fixes).
- media: pci: cx23885: Fix the error handling in cx23885_initdev()
  (git-fixes).
- media: venus: hfi: avoid null dereference in deinit (git-fixes).
- PM / devfreq: rk3399_dmc: Disable edev on remove() (git-fixes).
- spi: stm32-qspi: Fix wait_cmd timeout in APM mode (git-fixes).
- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width}
  based on DMA direction (git-fixes).
- mmc: jz4740: Apply DMA engine limits to maximum segment size
  (git-fixes).
- pinctrl: sunxi: fix f1c100s uart2 function (git-fixes).
- platform/chrome: cros_ec_proto: Send command again when timeout
  occurs (git-fixes).
- commit f8749e6</changelog>
  <changelog author="tiwai@suse.de" date="1655294404">- ALSA: usb-audio: Optimize TEAC clock quirk (git-fixes).
- commit 4bfd1c5</changelog>
</package>
<package pkgid="26aadafffe7dbe983534aed7dcb954179e5a5e00f53494b4659b6b7d00955db8" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.76.1"/>
  <changelog author="jgross@suse.com" date="1654862400">- kvm: fix wrong exception emulation in check_rdtsc (git-fixes).
- commit 5797afc</changelog>
  <changelog author="jgross@suse.com" date="1654862401">- KVM: nVMX: Query current VMCS when determining if MSR bitmaps
  are in use (git-fixes).
- commit d008aa3</changelog>
  <changelog author="jgross@suse.com" date="1654862402">- KVM: x86: Fix emulation in writing cr8 (git-fixes).
- commit a28f4e5</changelog>
  <changelog author="jgross@suse.com" date="1654862403">- KVM: x86/emulator: Defer not-present segment check in
  __load_segment_descriptor() (git-fixes).
- commit 27bee90</changelog>
  <changelog author="jgross@suse.com" date="1654862404">- kvm: x86/cpuid: Only provide CPUID leaf 0xA if host has
  architectural PMU (git-fixes).
- commit b46bf26</changelog>
  <changelog author="ohering@suse.de" date="1655121600">- PCI: hv: Fix NUMA node assignment when kernel boots with custom
  NUMA topology (bsc#1199365).
- commit 533234b</changelog>
  <changelog author="jack@suse.cz" date="1655121601">- blk-mq: fix tag_get wait task can't be awakened (bsc#1200263).
- commit 0a1fb57</changelog>
  <changelog author="jack@suse.cz" date="1655121602">- blk-mq: Fix wrong wakeup batch configuration which will cause
  hang (bsc#1200263).
- commit d25a54b</changelog>
  <changelog author="osalvador@suse.de" date="1655208000">- Rename colliding patches before the next origin/cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit 070ca14</changelog>
  <changelog author="neilb@suse.de" date="1655208001">- NFS: Don't report ENOSPC write errors twice (git-fixes).
- nfsd: Fix null-ptr-deref in nfsd_fill_super() (git-fixes).
- md: fix an incorrect NULL check in md_reload_sb (git-fixes).
- md: fix an incorrect NULL check in does_sb_need_changing
  (git-fixes).
- raid5: introduce MD_BROKEN (git-fixes).
- commit a49fc21</changelog>
  <changelog author="ptesarik@suse.cz" date="1655208002">- s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST
  flag (git-fixes).
- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM
  (git-fixes).
- s390/lcs: fix variable dereferenced before check (git-fixes).
- s390/ctcm: fix potential memory leak (git-fixes).
- s390/ctcm: fix variable dereferenced before check (git-fixes).
- s390/dasd: Fix read inconsistency for ESE DASD devices
  (bsc#1200206 LTC#198455).
- s390/dasd: Fix read for ESE with blksize &lt; 4k (bsc#1200206
  LTC#198455).
- s390/dasd: prevent double format of tracks for ESE devices
  (bsc#1200207 LTC#198454).
- s390/dasd: fix data corruption for ESE devices (bsc#1200207
  LTC#198454).
- KVM: s390: vsie/gmap: reduce gmap_rmap overhead (git-fixes).
- s390/nmi: handle vector validity failures for KVM guests
  (git-fixes).
- s390/nmi: handle guarded storage validity failures for KVM
  guests (git-fixes).
- vfio/ccw: Remove unneeded GFP_DMA (git-fixes).
- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm (git-fixes).
- KVM: s390: pv: avoid double free of sida page (git-fixes).
- KVM: s390: pv: add macros for UVC CC values (git-fixes).
- s390: fix strrchr() implementation (git-fixes).
- s390/pv: fix the forcing of the swiotlb (git-fixes).
- s390/qdio: cancel the ESTABLISH ccw after timeout (git-fixes).
- s390/qdio: fix roll-back after timeout on ESTABLISH ccw
  (git-fixes).
- s390/ftrace: fix ftrace_update_ftrace_func implementation
  (git-fixes).
- s390/cio: dont call css_wait_for_slow_path() inside a lock
  (git-fixes).
- s390/cio: Fix the "type" field in s390_cio_tpi tracepoint
  (git-fixes).
- s390/mcck: fix invalid KVM guest condition check (git-fixes).
- vfio-ccw: Check initialized flag in cp_init() (git-fixes).
- s390: fix detection of vector enhancements facility 1 vs. vector
  packed decimal facility (git-fixes).
- s390/vfio-ap: fix circular lockdep when setting/clearing crypto
  masks (git-fixes).
- virtio/s390: implement virtio-ccw revision 2 correctly
  (git-fixes).
- commit 61a09d5</changelog>
  <changelog author="osalvador@suse.de" date="1655208003">- Update config files
- commit 0d6e862</changelog>
  <changelog author="oneukum@suse.com" date="1655208004">- platform/x86: wmi: Replace read_takes_no_args with a flags field
  (git-fixes).
- commit 2771a0e</changelog>
  <changelog author="oneukum@suse.com" date="1655208005">- platform/x86: wmi: Fix driver-&gt;notify() vs -&gt;probe() race
  (git-fixes).
- commit e932131</changelog>
  <changelog author="osalvador@suse.de" date="1655208006">- Refresh 0002-PKCS-7-Check-codeSigning-EKU-for-kernel-module-and-k.patch
- commit 4835ae7</changelog>
  <changelog author="tiwai@suse.de" date="1655294400">- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files
  (git-fixes).
- ALSA: hda/conexant - Fix loopback issue with CX20632
  (git-fixes).
- ALSA: usb-audio: Set up (implicit) sync for Saffire 6
  (git-fixes).
- ALSA: usb-audio: Skip generic sync EP parse for secondary EP
  (git-fixes).
- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map()
  return value (git-fixes).
- clocksource/drivers/sp804: Avoid error on multiple instances
  (git-fixes).
- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size
  data type (git-fixes).
- ASoC: max98357a: remove dependency on GPIOLIB (git-fixes).
- ASoC: rt5645: Fix errorenous cleanup order (git-fixes).
- ASoC: tscs454: Add endianness flag in snd_soc_component_driver
  (git-fixes).
- ASoC: dapm: Don't fold register value changes into notifications
  (git-fixes).
- ALSA: usb-audio: Workaround for clock setup on TEAC devices
  (git-fixes).
- ath9k: fix QCA9561 PA bias level (git-fixes).
- b43: Fix assigning negative value to unsigned variable
  (git-fixes).
- b43legacy: Fix assigning negative value to unsigned variable
  (git-fixes).
- ACPI: sysfs: Fix BERT error region memory mapping (git-fixes).
- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default
  (git-fixes).
- cfg80211: set custom regdomain after wiphy registration
  (git-fixes).
- ACPI: sysfs: Make sparse happy about address space in use
  (git-fixes).
- commit d8922a7</changelog>
  <changelog author="tiwai@suse.de" date="1655294401">- drm/atomic: Force bridge self-refresh-exit on CRTC switch
  (git-fixes).
- drm/bridge: analogix_dp: Support PSR-exit to disable transition
  (git-fixes).
- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag
  (git-fixes).
- iio: dummy: iio_simple_dummy: check the return value of
  kstrdup() (git-fixes).
- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour
  (git-fixes).
- drm/radeon: fix a possible null pointer dereference (git-fixes).
- i2c: cadence: Increase timeout per message if necessary
  (git-fixes).
- drm/amdgpu/ucode: Remove firmware load type check in
  amdgpu_ucode_free_bo (git-fixes).
- drm: msm: fix error check return value of irq_of_parse_and_map()
  (git-fixes).
- drm/plane: Move range check for format_count earlier
  (git-fixes).
- drm/komeda: return early if drm_universal_plane_init() fails
  (git-fixes).
- fbcon: Consistently protect deferred_takeover with
  console_lock() (git-fixes).
- drm/virtio: fix NULL pointer dereference in
  virtio_gpu_conn_get_modes (git-fixes).
- drm/i915: Fix -Wstringop-overflow warning in call to
  intel_read_wm_latency() (git-fixes).
- iwlwifi: mvm: fix assert 1F04 upon reconfig (git-fixes).
- mac80211: upgrade passive scan to active scan on DFS channels
  after beacon rx (git-fixes).
- ipw2x00: Fix potential NULL dereference in libipw_xmit()
  (git-fixes).
- HID: bigben: fix slab-out-of-bounds Write in bigben_probe
  (git-fixes).
- HID: multitouch: Add support for Google Whiskers Touchpad
  (git-fixes).
- hwmon: Make chip parameter for with_info API mandatory
  (git-fixes).
- irqchip: irq-xtensa-mx: fix initial IRQ affinity (git-fixes).
- irqchip/armada-370-xp: Do not touch Performance Counter Overflow
  on A375, A38x, A39x (git-fixes).
- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value
  (git-fixes).
- irqchip/exiu: Fix acknowledgment of edge triggered interrupts
  (git-fixes).
- efi: Add missing prototype for efi_capsule_setup_info
  (git-fixes).
- drivers: i2c: thunderx: Allow driver to work with ACPI defined
  TWSI controllers (git-fixes).
- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging
  (git-fixes).
- Input: goodix - fix spurious key release events (git-fixes).
- commit 71b82f0</changelog>
  <changelog author="tiwai@suse.de" date="1655294402">- efi: Do not import certificates from UEFI Secure Boot for T2
  Macs (git-fixes).
- Refresh
  patches.suse/0003-MODSIGN-load-blacklist-from-MOKx.patch.
- commit 316d54d</changelog>
  <changelog author="tiwai@suse.de" date="1655294403">- vringh: Fix loop descriptors check in the indirect cases
  (git-fixes).
- mmc: block: Fix CQE recovery reset success (git-fixes).
- modpost: fix undefined behavior of is_arm_mapping_symbol()
  (git-fixes).
- modpost: fix removing numeric suffixes (git-fixes).
- misc: rtsx: set NULL intfdata when probe fails (git-fixes).
- USB: new quirk for Dell Gen 2 devices (git-fixes).
- USB: serial: option: add Quectel BG95 modem (git-fixes).
- usb: core: hcd: Add support for deferring roothub registration
  (git-fixes).
- usb: dwc2: gadget: don't reset gadget's driver-&gt;bus (git-fixes).
- USB: hcd-pci: Fully suspend across freeze/thaw cycle
  (git-fixes).
- drivers: usb: host: Fix deadlock in oxu_bus_suspend()
  (git-fixes).
- USB: host: isp116x: check return value after calling
  platform_get_resource() (git-fixes).
- serial: msm_serial: disable interrupts in __msm_console_write()
  (git-fixes).
- drivers: tty: serial: Fix deadlock in sa1100_set_termios()
  (git-fixes).
- tty: Fix a possible resource leak in icom_probe (git-fixes).
- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean()
  (git-fixes).
- staging: rtl8712: fix uninit-value in r871xu_drv_init()
  (git-fixes).
- staging: rtl8712: fix uninit-value in usb_read8() and friends
  (git-fixes).
- drivers: staging: rtl8192e: Fix deadlock in
  rtllib_beacons_stop() (git-fixes).
- drivers: staging: rtl8192u: Fix deadlock in
  ieee80211_beacons_stop() (git-fixes).
- watchdog: wdat_wdt: Stop watchdog when rebooting the system
  (git-fixes).
- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards (git-fixes).
- video: fbdev: pxa3xx-gcu: release the resources correctly in
  pxa3xx_gcu_probe/remove() (git-fixes).
- rtlwifi: Use pr_warn instead of WARN_ONCE (git-fixes).
- rtl818x: Prevent using not initialized queues (git-fixes).
- mwifiex: add mutex lock for call in
  mwifiex_dfs_chan_sw_work_queue (git-fixes).
- media: cx25821: Fix the warning when removing the module
  (git-fixes).
- media: pci: cx23885: Fix the error handling in cx23885_initdev()
  (git-fixes).
- media: venus: hfi: avoid null dereference in deinit (git-fixes).
- PM / devfreq: rk3399_dmc: Disable edev on remove() (git-fixes).
- spi: stm32-qspi: Fix wait_cmd timeout in APM mode (git-fixes).
- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width}
  based on DMA direction (git-fixes).
- mmc: jz4740: Apply DMA engine limits to maximum segment size
  (git-fixes).
- pinctrl: sunxi: fix f1c100s uart2 function (git-fixes).
- platform/chrome: cros_ec_proto: Send command again when timeout
  occurs (git-fixes).
- commit f8749e6</changelog>
  <changelog author="tiwai@suse.de" date="1655294404">- ALSA: usb-audio: Optimize TEAC clock quirk (git-fixes).
- commit 4bfd1c5</changelog>
</package>
<package pkgid="0ca9c8b36057d96b1663c85bcd6847b5b6a006b138a90f69361f66f0943957fd" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.5.1"/>
  <changelog author="oneukum@suse.com" date="1670932800">- timers: implement usleep_idle_range() (git-fixes).
- commit 8d5d397</changelog>
  <changelog author="petr.pavlu@suse.com" date="1671019200">- tracing/osnoise: Fix duration type (git-fixes).
- commit e223ebb</changelog>
  <changelog author="petr.pavlu@suse.com" date="1671019201">- tracing: Add tracing_reset_all_online_cpus_unlocked() function
  (git-fixes).
- commit 1bf2379</changelog>
  <changelog author="petr.pavlu@suse.com" date="1671019202">- tracing: Free buffers when a used dynamic event is removed
  (git-fixes).
- commit f5bb197</changelog>
  <changelog author="petr.pavlu@suse.com" date="1671019203">- blacklist.conf: module loader cleanup, not a bug fix
- commit 143fbeb</changelog>
  <changelog author="petr.pavlu@suse.com" date="1671019204">- module: fix [e_shstrndx].sh_size=0 OOB access (git-fixes).
- commit f0db1f3</changelog>
  <changelog author="petr.pavlu@suse.com" date="1671019205">- module: change to print useful messages from
  elf_validity_check() (git-fixes).
- commit cc1513a</changelog>
  <changelog author="oneukum@suse.com" date="1671019206">- dt-bindings: clocks: imx8mp: Add ID for usb suspend clock
  (git-fixes).
- commit c4d1409</changelog>
  <changelog author="oneukum@suse.com" date="1671019207">- can: kvaser_usb: make use of units.h in assignment of frequency
  (git-fixes).
- commit 595fe30</changelog>
  <changelog author="oneukum@suse.com" date="1671019208">- units: Add SI metric prefix definitions (git-fixes).
- commit de9d9f3</changelog>
  <changelog author="oneukum@suse.com" date="1671019209">- units: add the HZ macros (git-fixes).
- commit 3f20d38</changelog>
  <changelog author="oneukum@suse.com" date="1671019210">- kABI: reintroduce a non-inline usleep_range (git-fixes).
- commit 21c3a5e</changelog>
  <changelog author="pmladek@suse.com" date="1671019211">- Update patches.suse/clk-imx-Add-check-for-kcalloc.patch
  (CVE-2022-3114 bsc#1206391 git-fixes).
- commit 064b31b</changelog>
  <changelog author="oneukum@suse.com" date="1671019212">- can: do not increase rx statistics when generating a CAN rx
  error message frame (git-fixes).
- Refresh
  patches.suse/can-kvaser_usb_hydra-do-not-report-txerr-and-rxerr-d.patch.
- Refresh
  patches.suse/can-kvaser_usb_leaf-do-not-report-txerr-and-rxerr-du.patch.
- Refresh
  patches.suse/can-pch_can-do-not-report-txerr-and-rxerr-during-bus.patch.
- commit db678c8</changelog>
  <changelog author="oneukum@suse.com" date="1671019213">- can: do not increase rx_bytes statistics for RTR frames
  (git-fixes).
- commit 5858150</changelog>
  <changelog author="oneukum@suse.com" date="1671019214">- can: m_can: fix typo prescalar -&gt; prescaler (git-fixes).
- commit b0ef074</changelog>
  <changelog author="oneukum@suse.com" date="1671019215">- can: m_can: is_lec_err(): clean up LEC error handling
  (git-fixes).
- commit c7997f5</changelog>
  <changelog author="oneukum@suse.com" date="1671019216">- restore m_can_lec_type (git-fixes).
- commit 785d940</changelog>
  <changelog author="oneukum@suse.com" date="1671105600">- HID: usbhid: Add ALWAYS_POLL quirk for some mice (git-fixes).
- commit 43731f8</changelog>
  <changelog author="oneukum@suse.com" date="1671105601">- padata: Fix list iterator in padata_do_serial() (git-fixes).
- commit 7ce0fe3</changelog>
</package>
<package pkgid="94e89039507e44a9e1d6b7138dbd883cb8fb07c139fbcbb154b2d4faa4b8443d" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.8.1"/>
  <changelog author="oneukum@suse.com" date="1673438400">- blacklist.conf: misattributed, we do not have this bug
- commit bc3473d</changelog>
  <changelog author="oneukum@suse.com" date="1673438401">- blacklist.conf: too risky
- commit 51ffe7a</changelog>
  <changelog author="oneukum@suse.com" date="1673438402">- blacklist.conf: misattributed
- commit ee5f25a</changelog>
  <changelog author="msuchanek@suse.de" date="1673438403">- powerpc: Take in account addition CPU node when building kexec
  FDT (bsc#1207016 ltc#201108).
- powerpc: export the CPU node count (bsc#1207016 ltc#201108).
- commit 4ca3eba</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673438404">- Refresh
  patches.suse/octeontx2-Move-devlink-registration-to-be-last-devli.patch.
  Added missing hunk in backport.
- commit 9b34e71</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673438405">- cpufreq: ACPI: Defer setting boost MSRs (bsc#1205485).
- commit 32f938b</changelog>
  <changelog author="msuchanek@suse.de" date="1673438406">- ibmveth: Always stop tx queues during close (bsc#1065729).
- commit 11e0f4a</changelog>
  <changelog author="lduncan@suse.com" date="1673438407">- blacklist.conf: add two drbd git-fixes to ignore
- commit d03d927</changelog>
  <changelog author="oneukum@suse.com" date="1673438408">- Update
  patches.suse/dmaengine-idxd-Fix-crc_val-field-for-completion-reco.patch
  (bsc#1206554).
  Added bugzilla number
- commit 1fe5012</changelog>
  <changelog author="lduncan@suse.com" date="1673438409">- drbd: destroy workqueue when drbd device was freed (git-fixes).
- drbd: remove call to memset before free
  device/resource/connection (git-fixes).
- drbd: use after free in drbd_create_device() (git-fixes).
- drbd: set QUEUE_FLAG_STABLE_WRITES (git-fixes).
- drbd: remove usage of list iterator variable after loop
  (git-fixes).
- commit 26591d7</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524800">- cpufreq: ACPI: Remove unused variables 'acpi_cpufreq_online'
  and 'ret' (bsc#1205485).
- commit bac712b</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524801">- cpufreq: ACPI: Only set boost MSRs on supported CPUs
  (bsc#1205485).
- commit 2fc91f1</changelog>
  <changelog author="ggherdovich@suse.cz" date="1673524802">- cpufreq: intel_pstate: Add Sapphire Rapids support in no-HWP
  mode (bsc#1201068).
- commit 15e54a9</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1673524803">- octeontx2-pf: Fix lmtst ID used in aura free (jsc#SLE-24682).
- octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B
  header extraction support (jsc#SLE-24682).
- octeontx2-pf: Fix pfc_alloc_status array overflow
  (jsc#SLE-24682).
- octeontx2-pf: Fix SQE threshold checking (jsc#SLE-24682).
- octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT]
  (jsc#SLE-24682).
- octeontx2-pf: Fix unused variable build error (jsc#SLE-24682).
- octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly
  (jsc#SLE-24682).
- octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon
  (jsc#SLE-24682).
- octeontx2-af: return correct ptp timestamp for CN10K silicon
  (jsc#SLE-24682).
- octeontx2-pf: Add egress PFC support (jsc#SLE-24682).
- octeontx2-pf: Reduce minimum mtu size to 60 (jsc#SLE-24682).
- octeontx2-af: Set NIX link credits based on max LMAC
  (jsc#SLE-24682).
- octeontx2-af: Limit link bringup time at firmware
  (jsc#SLE-24682).
- octeontx2-af: Skip CGX/RPM probe incase of zero lmac count
  (jsc#SLE-24682).
- octeontx2: Modify mbox request and response structures
  (jsc#SLE-24682).
- octeontx2-af: Don't reset previous pfc config (jsc#SLE-24682).
- octeontx2-af: fix operand size in bitwise operation
  (jsc#SLE-24682).
- commit a2de709</changelog>
  <changelog author="krisman@suse.de" date="1673524804">- arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault
  path (performance bsc#1203219).
- commit 82bc0ed</changelog>
  <changelog author="oneukum@suse.com" date="1673611200">- media: stv0288: use explicitly signed char (git-fixes).
- commit 72af28b</changelog>
  <changelog author="tiwai@suse.de" date="1673611201">- nfc: pn533: Wait for out_urb's completion in
  pn533_usb_send_frame() (git-fixes).
- ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude
  laptops (git-fixes).
- ALSA: line6: fix stack overflow in line6_midi_transmit
  (git-fixes).
- ALSA: line6: correct midi status byte when receiving data from
  podxt (git-fixes).
- ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071
  tablet (git-fixes).
- drm/amdgpu: handle polaris10/11 overlap asics (v2) (git-fixes).
- drm/amdgpu: make display pinning more flexible (v2) (git-fixes).
- HID: plantronics: Additional PIDs for double volume key presses
  quirk (git-fixes).
- HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint
  (git-fixes).
- remoteproc: core: Do pm_relax when in RPROC_OFFLINE state
  (git-fixes).
- soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15
  (git-fixes).
- PCI: Fix pci_device_is_present() for VFs by checking PF
  (git-fixes).
- wifi: wilc1000: sdio: fix module autoloading (git-fixes).
- ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod
  (git-fixes).
- ima: Fix a potential NULL pointer access in
  ima_restore_measurement_list (git-fixes).
- ipmi: fix long wait in unload when IPMI disconnect (git-fixes).
- drm/connector: send hotplug uevent on connector cleanup
  (git-fixes).
- ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (git-fixes).
- selftests: Use optional USERCFLAGS and USERLDFLAGS (git-fixes).
- ACPI: resource: Skip IRQ override on Asus Vivobook
  K3402ZA/K3502ZA (git-fixes).
- selftests: set the BUILD variable to absolute path (git-fixes).
- drm/i915/migrate: fix length calculation (git-fixes).
- drm/i915/migrate: fix offset calculation (git-fixes).
- drm/i915/migrate: don't check the scratch page (git-fixes).
- commit 1d4442d</changelog>
  <changelog author="msuchanek@suse.de" date="1673611202">- powerpc/rtas: avoid scheduling in rtas_os_term() (bsc#1065729).
- powerpc/rtas: avoid device tree lookups in rtas_os_term()
  (bsc#1065729).
- commit 49b518d</changelog>
  <changelog author="tiwai@suse.de" date="1673697600">- efi: fix userspace infinite retry read efivars after EFI
  runtime services page fault (git-fixes).
- ASoC: qcom: lpass-cpu: Fix fallback SD line index handling
  (git-fixes).
- ASoC: wm8904: fix wrong outputs volume after power reactivation
  (git-fixes).
- ALSA: control-led: use strscpy in set_led_id() (git-fixes).
- ALSA: hda: cs35l41: Check runtime suspend capability at
  runtime_idle (git-fixes).
- ALSA: hda: cs35l41: Don't return -EINVAL from system
  suspend/resume (git-fixes).
- ALSA: usb-audio: Relax hw constraints for implicit fb sync
  (git-fixes).
- ALSA: usb-audio: Make sure to stop endpoints before closing EPs
  (git-fixes).
- platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER
  if present (git-fixes).
- platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting
  (git-fixes).
- platform/surface: aggregator: Add missing call to
  ssam_request_sync_free() (git-fixes).
- platform/surface: aggregator: Ignore command messages not
  intended for us (git-fixes).
- platform/x86: sony-laptop: Don't turn off 0x153 keyboard
  backlight during probe (git-fixes).
- drm/msm/adreno: Make adreno quirks not overwrite each other
  (git-fixes).
- drm/msm: another fix for the headless Adreno GPU (git-fixes).
- dt-bindings: msm: dsi-controller-main: Fix description of core
  clock (git-fixes).
- dt-bindings: msm: dsi-controller-main: Fix operating-points-v2
  constraint (git-fixes).
- dt-bindings: msm: dsi-phy-28nm: Add missing qcom,
  dsi-phy-regulator-ldo-mode (git-fixes).
- drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is
  not for aux transfer (git-fixes).
- dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY
  (git-fixes).
- dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY
  (git-fixes).
- drm/virtio: Fix GEM handle creation UAF (git-fixes).
- commit 127798d</changelog>
  <changelog author="tiwai@suse.de" date="1673697601">- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent
  UAF (git-fixes).
- ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360
  13-aw0xxx (git-fixes).
- ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- ALSA: hda - Enable headset mic on another Dell laptop with
  ALC3254 (git-fixes).
- ALSA: hda/realtek - Turn on power early (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- commit ffbf830</changelog>
</package>
<package pkgid="618e1ea770984c130de53bd6d60ac4027b8f4fe7e6a765822a27586afbb64b4f" name="cmocka" arch="src">
  <version epoch="0" ver="1.1.5" rel="150400.3.2.3"/>
  <changelog author="asn@cryptomilk.org" date="1384171200">- Update to version 0.3.2
  * Fixed FindNSIS detection.
  * Fixed unit_test_setup() and unit_test_teardown().
  * Fixed GTest and GCC message style conformance
  * Fixed stringification in will_return_always().</changelog>
  <changelog author="asn@cryptomilk.org" date="1397217600">- Update to version 0.4.0
  * Added support for group testing.
  * Added assert_return_code().
  * Added better messages for errors.
  * Added cmake config mode support.
  * Fixed bug with unit_test_setup and unit_test_teardown.
  * Fixed a lot of small bugs.</changelog>
  <changelog author="asn@cryptomilk.org" date="1409054400">- Add BuildRequire for pkg-config.</changelog>
  <changelog author="asn@cryptomilk.org" date="1409054401">- Add BuildRequire for pkg-config.</changelog>
  <changelog author="asn@cryptomilk.org" date="1409572800">- Add baselibs.conf as Source.</changelog>
  <changelog author="asn@cryptomilk.org" date="1410436800">- Update to version 0.4.1
  * Added CMOCKA_TEST_ABORT env variable to leave threading apps.
  * Fixed count parameter of expect_check() macro.
  * Fixed reporting the number of tests.
  * Fixed cmake config files.</changelog>
  <changelog author="asn@cryptomilk.org" date="1424088000">- Update to version 1.0.0
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="asn@cryptomilk.org" date="1424174400">- Turn on unit tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1424174401">- Add missing requires for cmake and pkg-config</changelog>
  <changelog author="asn@cryptomilk.org" date="1426161600">- Update to version 1.0.1
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Use properly %cmake macro to build nicely with all the linker/cflags
- Use proper Url and Source
- Properly fails on crashing tests instead of finishing build
- Enable cmockery support</changelog>
  <changelog author="asn@cryptomilk.org" date="1436961600">- Do not turn of rpath support</changelog>
  <changelog author="asn@cryptomilk.org" date="1474459200">- Update to version 1.1.0
  * Added support to catch multiple exceptions
  * Added support to verify call ordering
  * Added support to pass initial data to test cases
  * Added will_return_maybe() for ignoring mock returns
  * Added subtests for groups using TAP output
  * Added support to write multiple XML files for groups
  * Improved documentation
  * Fixed XML output generataion
  * Fixed Windows builds with VS2015</changelog>
  <changelog author="asn@cryptomilk.org" date="1477396800">- Fix url for Source0</changelog>
  <changelog author="asn@cryptomilk.org" date="1491566400">- Update to version 1.1.1
  * Fixed TAP output
  * Fixed cmocka on Windows x64
  * Fixed xUnit output durations</changelog>
  <changelog author="asn@cryptomilk.org" date="1535544000">- Update to version 1.1.2
  * Added function to filter tests (cmocka_set_test_filter)
  * Added new mocking example (uptime)
  * Fixed fixture error reporting
  * Fixed compiler flags detection
  * Some improvement for API documentation
- Added HTML documentation</changelog>
  <changelog author="asn@cryptomilk.org" date="1535630400">- Fix packaging the documentation
- Added 0001-cmake-Only-support-building-docs-the-on-cmake-3.9.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1538049600">- Update to version 1.1.3
  * Fixed subunit output on failures
  * Do not abort if a test is skipped
  * Switched to Modern CMake
- Removed 0001-cmake-Only-support-building-docs-the-on-cmake-3.9.patch</changelog>
  <changelog author="asn@cryptomilk.org" date="1553774400">- Update to version 1.1.5
  * Added cmocka_set_skip_filter()
  * cmocka version 1.1.4
  * Added assert_float(_not)_equal()
  * Added expect_any_always()
  * Small bug fixes</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133122).</changelog>
</package>
<package pkgid="53f0e622e7042491c07b856c2615c39967b3a18ae80ddcdbc1145244e7e42d43" name="cni" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="150100.3.8.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="2478bdf543b4cd8f9c15480b40209e8f56bfc0bd3ba424c5e38236fda7f989a4" name="cni" arch="ppc64le">
  <version epoch="0" ver="0.7.1" rel="150100.3.8.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="532bb94f3170f344b5f1e2c35fce3c66a95417a60977c484fc7f3cb1d0c4a1c6" name="cni" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="150100.3.8.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="15f3d60315c836738b693d58199b3248b64604e3d082887bcdc6c6b86fd68a63" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="150100.3.8.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="6ba3458feabc0788a9ae642fdbd43f651a65a5ddf3669ad4b9ddb2a05ae3d654" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="150100.3.8.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="39aac73101fbb53ec9ee105d566fe25f6dad02db5a175b74b27ff374afa58d2c" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="0.8.6" rel="150100.3.11.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="0402aa0c0f40010337a8696b11c810bcf075f42337740ea1c4922621a0b96f75" name="cni-plugins" arch="ppc64le">
  <version epoch="0" ver="0.8.6" rel="150100.3.11.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="71d8c17ca1b80cb9af9455dff8e3590ae7420c9993d2a7f8993919ee64cd8c94" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="0.8.6" rel="150100.3.11.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="0496aee6fe90b5ad1ccaf521ad524ef5d881605a6a2426a1b609fd2270acdc77" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="150100.3.11.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="dc9164408fad9aadd5887ae8a10cb99dd3248f27d913c57fe9682b9bc42a69a2" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="150100.3.11.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="d715bf16f54e6012f7b7b27c6e58d410be71d9a8fb7be2490d034225cffb1d88" name="collectd" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="291ce2e5de96b0914ab05a0c4761dec958d0778b6b46c6bb4d8f3967a838d62a" name="collectd" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="6935dd8445ba00dacf63f38a876eed5257cd6261adc4f388504ce9935fc4c192" name="collectd" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="69ad239b38776ea3dea32a5b830f576ee7b986380e54bec59b08fcc6b716c407" name="collectd" arch="src">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="80b6c1c0b150ce6f8052e84a46a6a18b2410c867141935bd258d99625e87220c" name="collectd" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="9509ec0cba5eb7ef883cd17f658542ec9caf589211081e59725c076b6bc03add" name="collectd-plugin-buddyinfo" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="c278f3facb33402fd6263e4f960708d5d7bac2c3cfcc10ac473748c7c0cbab27" name="collectd-plugin-buddyinfo" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="39e51749b00751b2bbf0f9f8988c9467f041f10d7ac582baf2c02283f1acae46" name="collectd-plugin-buddyinfo" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="854535e4525c71fddf8aeeca3d832e823a29c615e99a166d9de8cbd64cb52897" name="collectd-plugin-buddyinfo" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="61456290fde8a63f352eceef52ecefd931a231058de3fd106bca4ccba469e07d" name="collectd-plugin-connectivity" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="cba9cfb7fd1cade478be80e11e0f2ae309798ee3a68d0a994bf3afa0511e0627" name="collectd-plugin-connectivity" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="dc67b66c3dfd608ec3016b7f6f2e9087f5bbf146c8f759e69ba76d19e7f32541" name="collectd-plugin-connectivity" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="8c0a6e7ecfb169287432e8fb9d0e1645d300a2f607e849b8598052e38820631a" name="collectd-plugin-connectivity" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="2b4e340997e16eaa4d9c04e8deb7741dbb4a70ca988af92154f9d6ac70b007b9" name="collectd-plugin-dbi" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="ab32d54c3515691f49ff25c8a956c6e0c2d7c2a6422692d5eae92297da47610a" name="collectd-plugin-dbi" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="13521d1f6d54665a748157f891a963c0c3d3d2ddfb9abef652609e43e22e7cbd" name="collectd-plugin-dbi" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="374bcdad07271acef04d8470c813cc961d4b3e776592a604efbec5ba3771ffff" name="collectd-plugin-dbi" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="044b29a8c672e1e270b9767dea6995e31445f0f18a2f337eb65ef9ee3f3a339d" name="collectd-plugin-ipmi" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="39263a34b041ab1b76bc3e981c8967dd2793351dc2b26d0d8682fc73361dd051" name="collectd-plugin-ipmi" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="45480d89e2dafdf0fb1a90b92d7e3086fa49dfff660716ff12854e0584dd26c2" name="collectd-plugin-ipmi" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="4710dfbdbcc85854e032c41135e61bdffb7350d50e34e962d721df093359c306" name="collectd-plugin-ipmi" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="e27858816c6221e28b3fdde31b8e441cfb5ba711aae48a2f0df5954ff0dba267" name="collectd-plugin-java" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="568ebac278c579147eaef2a9347ddd66301bd1bfd634b25c0eaea3691caeee10" name="collectd-plugin-java" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="4dcc74f2e4c3219ce0ccf709d5ca0f56811e3ced291ab75096e8d08ac4ef7daf" name="collectd-plugin-java" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="5814be2dbc3ad9ef4afb6384152964bfe2c3d52818957c76f17efac0dc3ee654" name="collectd-plugin-java" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="1e4a9cec0962107806fd5d94511bc828a70b51bcbce8251661e17094cae35e32" name="collectd-plugin-logparser" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="eca15fa171775b9e8d11087a154622d88ab7340e8fa74c05fb392aaef7a280c9" name="collectd-plugin-logparser" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="1e5c7f9f7a5fe223ab13aff6361305097c56b1ad85b38c58948e559099786adb" name="collectd-plugin-logparser" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="0ca05d1f511991062e52c17cbc3b3364bcb360d567824ca67864052032df8525" name="collectd-plugin-logparser" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="3c517d15684497d1a29479bfe9724df73401da3ee08711fecc79514d63588d41" name="collectd-plugin-lua" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="214898f28c79c46dff171eef2ebb40e53de88a5f58e6a32787693e0593746094" name="collectd-plugin-lua" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="5a5386156738c7fb3ff894a8ffed77c6d51b861f7afd88e102a6fb0834a68ffa" name="collectd-plugin-lua" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="9f7a06fdcf80d21158e139131dd186f411d885734586936f5abbadb3ad5e3e5b" name="collectd-plugin-lua" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="f2d1670f6145fde79bd8a49a432579fd8e3f86e2f8d1d6525e9aff0b9fe34952" name="collectd-plugin-mcelog" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="ef9a525bb08291405ed04d9c45399bbf2413b0b5c93ebc943f3bce37b610af58" name="collectd-plugin-mcelog" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="f27dd15e2b528c38643f54adfe4734e175b590fd22b5bef0e3ad09b36325775a" name="collectd-plugin-mcelog" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="ff5a22f1d4a8459e46b0287ee46bbfd1483d5136d22b76d0885da2095fa21127" name="collectd-plugin-mcelog" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="f5361affe497d8862687338f73101d0292e50fcfee84fea65eeb612a12757154" name="collectd-plugin-memcachec" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="7a2d6be8ba07e90cf54d511678cce8b52f5ac56d99ffb875ef1d59b64607c57a" name="collectd-plugin-memcachec" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="479e51be7eeca45739301569e7b07bd5f48bbb91450c3368a535c35fe71cf35f" name="collectd-plugin-memcachec" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="8cddac52bc3063f8feacf5380fa7190cbeaee92209b7c8cc2d320257d6a01cc3" name="collectd-plugin-memcachec" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="50151dbd78db9a7ac96bdf5e0790ab13c122368abbe642c0a606e56df1b2ee1d" name="collectd-plugin-mysql" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="d83846de05f2ecaf555f300014a716068a27fa9e2dd0ae8ae143398f94664d70" name="collectd-plugin-mysql" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="79cb15ed57f8e7c89f60ede7f58716082f753472465dd5172793fa62782ad4fd" name="collectd-plugin-mysql" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="149de24077afe1fa792861ec0e6be5b134e2ad3c90236e2651ebf277e8856212" name="collectd-plugin-mysql" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="992244f6cb9240d423807ac57208ae2f40349fea34d8a737bf8c8ffbdad0281e" name="collectd-plugin-notify-desktop" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="add80a274acdd20ac52e36b62813e9bfa3ec68fe4e13ab682f6bfc4028d38ac7" name="collectd-plugin-notify-desktop" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="36d5af1d79ceb71b094442f1100b2290f2404c33a7f17b845acd295fff379c95" name="collectd-plugin-notify-desktop" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="c41b42ec0ab8c25540eaa96d1a21a5550694b637ac507587e0cab312d6e101ee" name="collectd-plugin-notify-desktop" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="60ac43910314d9b8fd797e66473791ac8f1ce4a26f8623263badf8c3827ee0ec" name="collectd-plugin-nut" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="191734c6d701aa54898cc021d15ee458861c0d64b0160f0416e0d84f0d432558" name="collectd-plugin-nut" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="a0b1b50c2891ac7766d035745e2f4b83eb737404b52d3344311631e71270e460" name="collectd-plugin-nut" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="dfecad30b9e82a715f60eda658b88bc444eeb72cecc34b925d9efd2e0cc16acc" name="collectd-plugin-nut" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="c37005a2213fd76506f18e81ab2c72471b8d9f03f7130fa3db7b82f6ce1e0f82" name="collectd-plugin-openldap" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="6776bba450d2905d200284eb1eff164187f7b0a0b942c5a00b9b112537cd14c0" name="collectd-plugin-openldap" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="820f0148b489036ec28a82099795893f1648631e9272df87e97e7671f1d8c03c" name="collectd-plugin-openldap" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="f8dcac6c19877b8b355be6fe939674215d863acc42a02d3525add286456d5992" name="collectd-plugin-openldap" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="801444e19438a2624e0157b4ca55b722fa0869463a01bda210cf96291ff3d8e4" name="collectd-plugin-ovs" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="24dc8830b89d8b99420c2471a3f25ff50f27d61a2e41a90a2fbafefd5675d49e" name="collectd-plugin-ovs" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="1289b86def7967e7a994db4dfcb7fbb0f8a9638573eb70a285f2ad4c606e7148" name="collectd-plugin-ovs" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="643c6c51433c0eaa5373d7503ab6792360ec1e2433b31c17d99fdd1342c3182d" name="collectd-plugin-ovs" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="1208ae06a696432580d4488777698ab7cb7ac6ee00517d21a67f94bc030e54a9" name="collectd-plugin-pcie" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="a25d8dd5ccd167add1661cfe362ef67a57891331d03a250bde050f852a87c7f3" name="collectd-plugin-pcie" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="7f10540d01b88c712bdcfc2236ddfaee1d0f46dfdad309843b0ca62d9334c432" name="collectd-plugin-pcie" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="937bf855e11e6e96788bb0462fd06038a0d6e88914f75ce2b7d49fca645a02a8" name="collectd-plugin-pcie" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="b51e40f41406ce6c6b5573cad0e133f7eba77e15652f9d1f3a004e6fdf3be6cd" name="collectd-plugin-pinba" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="3fd52258e4d145d2f94ef8ae91ebe685a9a3a5326055becb3cea3ceeb0626b7a" name="collectd-plugin-pinba" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="8989b64dca3d16b0de4e33af0d7ca1445214efd1cd94e4b084d3692db44f6b6f" name="collectd-plugin-pinba" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="2544624595565c80ba3951f3da3d67ad678deaadf7045689f8e9db9ced8ae77c" name="collectd-plugin-pinba" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="94f8c35576fef75a63019baceb96df34c7d74c59a6f75fd5ba6a41213307a1e8" name="collectd-plugin-postgresql" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="c01c9b94f18115e8c43e013f65322272f21bd4d8b0b416c589770906b7c9d3a9" name="collectd-plugin-postgresql" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="e741be39acee574b69cbb01f6426273ffa1acc60874c447b64571f0c0526650b" name="collectd-plugin-postgresql" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="5114ee07d395173e9b340e1c7ad15aea1577ad247931fce5bed0fc39520dd9b6" name="collectd-plugin-postgresql" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="b7c3f592f7f5b1fb33aa221bd0abc62e19bc0192295a008262d74630dd262a6e" name="collectd-plugin-procevent" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="4c84dcc09a63b7ca118cb81dba118669ac4d3dc23751470fa7eb5e34a8cdf675" name="collectd-plugin-procevent" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="4d6b2d31b1e732e039b7994fcc140b15b30191cd8bb9ccd5a62f8366153edb74" name="collectd-plugin-procevent" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="c6473afde8d23d7abf63ea5b97db27fa284971f6d6cf4456c86a7b56320129d8" name="collectd-plugin-procevent" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="bb4a158efd881905708beed0b934554e150aeaafde58bb9ef8ba50cb2ed1f15f" name="collectd-plugin-python3" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="5164b22d4a2b9d7bbd27c4c423d25c3349af452dc2361bffc2dd14c48bef29cd" name="collectd-plugin-python3" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="bd75b20fe2e98438636cd2ca8de12e1ab53e137cee12b24b0ae60c9138caf51f" name="collectd-plugin-python3" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="1eeda869aec5f2d835cb9a5abda17eb9f7e23d623bb92ee42e67cb4730f07933" name="collectd-plugin-python3" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="5c79168518e0257d66927aa8c04e5cc2046845c78777c4ccaebdd42f30d61381" name="collectd-plugin-smart" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="eeb9f50e38343d096e8d4d4fb707537fc8a4f8bac6db23171619e30c0ec2ecec" name="collectd-plugin-smart" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="34075fcfe831e7503613f4c284163688cd8e6b78d35cb533f37229afccb0a244" name="collectd-plugin-smart" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="603d4b157ef8ba4c34a0a4d38f824881fce91ab3b7fdaf0bcb789baf9900dded" name="collectd-plugin-smart" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="e01b42f3ccddfdcbed6ee78e0f1d31e2ea2fa5be569d662d95e23f2db8c99bfa" name="collectd-plugin-snmp" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="7bf09f7e3291e9855453ca7afea38e6572e837d4a9f7e941675604c900496583" name="collectd-plugin-snmp" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="c231d1b9f7b906d4b906e4d07972b5fe6f62284150c63b75a72bcca94edc49fa" name="collectd-plugin-snmp" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="15ec64e791ae9882348f0cb3f8bafd8884ea7da8909ba02f72d320f97f0823a3" name="collectd-plugin-snmp" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="9c5ef88f12f00b169fb4b8d46f8606aa2aa5e4d61839b0fb330dacd42ee86911" name="collectd-plugin-synproxy" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="88db4d566161b73982a8a6d8496db0d9acdeb7698d74cb1a8469858b20f3ce0b" name="collectd-plugin-synproxy" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="4c76d860ea3aa383bd1e08113bca3ed6bc1ca6ce440722f3e3fa809c4e481094" name="collectd-plugin-synproxy" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="da82f57d1f95454bc93627409d512be0b7b0433ee3637742561b3b7c80965c14" name="collectd-plugin-synproxy" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="bf45fccd34e24d398eab1065eeb17371de156930f89a5447c2f14b7539ce48be" name="collectd-plugin-sysevent" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="e3382c1edc5b179c99399dc967da35b4404f61ba133a9ec8936cc88c5b10c23e" name="collectd-plugin-sysevent" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="21baeec7209ba98c686b409c7d1851e005dd629ee6978b92187746cc4b04b5f0" name="collectd-plugin-sysevent" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="3bf61602992aa5a2f8f8ff0dd5aef3364af12bdc0777811648a854a95b93aa0b" name="collectd-plugin-sysevent" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="d141d9a9f2dc6cfda38a536f82ee4967d543f199ba7b4187467c8eda22af6656" name="collectd-plugin-ubi" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="2a8b532bcccd31d51d0cdb8c15e11482e7a5344d3cc2bfea7a970f4519c5782a" name="collectd-plugin-ubi" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="40d877c58e6d62cc336771f017746dced067ad5f8105af21f8718b224b61ce53" name="collectd-plugin-ubi" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="860cf718ed9117f87a01e7e914f26e2e79e3eb8e9a9b9b22e134d6c4f910c7fd" name="collectd-plugin-ubi" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="040756b53f29904f8cd88b9cdce9030ba5413a7f2710c0578d5cae1b343e5ff7" name="collectd-plugin-uptime" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="1e18bcea6bfac6ebfa8e2092c4e5b45fe7daf224b953b1c149fbc7fc5a015404" name="collectd-plugin-uptime" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="4c335a9614b6e1e169aa5e4e1c4aebb7ae24586bea4ab6b2d9f258d38c85a7ee" name="collectd-plugin-uptime" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="a7f7f24fdbaf7bc46192c3ed2087a132ea511b758d5e835665e89ba39561c410" name="collectd-plugin-uptime" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="7309b8f4cd1f578a8481f33fec0cfe803f30a1a5de911fceb3060bb8ee080018" name="collectd-plugin-virt" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="231492b53f7c471eb5eeb8b42862dfbc7945394044e69732c26fd655dfaf15f3" name="collectd-plugin-virt" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="633ae907535d0e5eab3252f0d8d60b75b37adae6f01ec40feb303b936a02e447" name="collectd-plugin-virt" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="8dea2677ec6b7dfe7e626b76a0634105099e312b452815c6e4ee49ea9d6c548c" name="collectd-plugin-virt" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="f4272f8f737b18199937b1d16577c8368d0a7283bee5705705e647eeb85a7a24" name="collectd-plugin-write_influxdb_udp" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="7bc08d90815571acbcfa201e97300984345fbc70231609e8b03e11199cee992f" name="collectd-plugin-write_influxdb_udp" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="5c4a24aa0b9fd1fa56895dc12d681008a484af709795ad6c4932622c958e9ac4" name="collectd-plugin-write_influxdb_udp" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="7f220943f95306d82cc36a640750bb241edfb80d5fcddc5d0d49b3f56227cc71" name="collectd-plugin-write_influxdb_udp" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="007e482a7db9e02e376b256f102d1992ada1739f8e0249495321cee68ca73e74" name="collectd-plugin-write_stackdriver" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="c6dffb5091bcfb069f97e4f19432cadadf21d62fe37d9fe64dfedcedaa88974b" name="collectd-plugin-write_stackdriver" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="f3f97353e880c3641ef89d1a2bf388222cb526a8b7f3d7e138322baa41e0f1be" name="collectd-plugin-write_stackdriver" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="2f2d9a6d6a848efa2b89f45443c75f5917d80ae1a5461889d80289016b3b3778" name="collectd-plugin-write_stackdriver" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="ae69442345de851951dd216beff5c9b9b9588ce92caf875d72b11e5135e06c04" name="collectd-plugin-write_syslog" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="573cf225de48e59634e7250b9f48922817a7be2634cb06eafe9afb9f7e2e7579" name="collectd-plugin-write_syslog" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="be8a64031721df46136575d88f2b6c0f4e35a37f7eeba653514e5636dfea16b3" name="collectd-plugin-write_syslog" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="25530be7b1e28e796bd2fb1d3f4a7935ba47afb7ceda814d7c798362caff1272" name="collectd-plugin-write_syslog" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="a9ea84065ab43442cd9bac4cb7770cc03362c30dd70daa99fd1f5f94dd373dd1" name="collectd-plugins-all" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="d89e4b5c10b61b5b645a25c4a476d412109a608ff62c96005b969b845baa9d27" name="collectd-plugins-all" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="2cfc8eb66d96190d40b7229f2bd43faadf5e1867837f7cf65f0bf3a1abbb20ae" name="collectd-plugins-all" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="0f902d3bb2953fd18b6d45f867403efbf680cf952fc6010d522f795e00f1107d" name="collectd-plugins-all" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="78da6424a09a8fd75ae81b07863fe802f6184e06555fb6249e93865e1854f151" name="collectd-spamassassin" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="094cdfef4741cc396d65086fbe7b03cbf9ff4fa49e26597fedb19bcef60b9d60" name="collectd-spamassassin" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="78fea139a3b5f494a3d85b5553bdbaa71c95e9b0881c741fedce12e9448c859f" name="collectd-spamassassin" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="7f5ace0e71a441482bd279d3a44a4a6de78e12f35bc87f3d86497f9419b43a06" name="collectd-spamassassin" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="3392dd9b4539d6731f60797178d75b24011d7c519c78f26cd259b36292e7c055" name="collectd-web" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="6aaa93ba93283c8497d08d86108bf3981ad28eb6bc1ab4052221723c68787f06" name="collectd-web" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="6a567408cf38849507b0842584a60ba7e0113031b058769beac6fa69ae82a5e4" name="collectd-web" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="154e50ea4ebe22508778076a7635859141d24d200c8c4e8c0d8c04464f198aef" name="collectd-web" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="c06ce2ba046fc90f488529f49b48c1c990a8c0873d9ff1f92f9d8a4290d20d3c" name="collectd-web-js" arch="aarch64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="a74e0210097663bafa6fe2983ffa86b90ea32739c1abba4923bcfc80c670549b" name="collectd-web-js" arch="ppc64le">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="e71591c25d5f369ac871cdc48d6c72ba8b4c2d2f0b1c25a19237184a6abc4176" name="collectd-web-js" arch="s390x">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="79c96e11902b4499418cfa84dc2c6ba2161b396a3c71e7c39812e51c15068d38" name="collectd-web-js" arch="x86_64">
  <version epoch="0" ver="5.12.0" rel="150400.3.2.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1494072000">- update to version 5.7.1:
  * collectd: Handling of boolean configuration options has been
    unified. Thanks to Sebastian Harl. #2083, #2098
  * collectd: Reporting of internal statistics has been fixed.
    Thanks to Florian Forster. #2108
  * collectd, various plugins: Bugs and issues reported by
    scan-build and coverity-scan have been fixed. Thanks to Ruben
    Kerkhof and Florian Forster.
  * Build system: Parallel build have been fixed. Thanks to Ruben
    Kerkhof. #2110
  * DPDKStat plugin: Portability issues and a double-close bug have
    been fixed. Thanks to Ruben Kerkhof and Marc Fournier.
  * Intel RDT plugin: A check for the libpqos library version has
    been added. Thanks to Serhiy Pshyk.
  * NetApp plugin: Compilation problems have been corrected. Thanks
    to Florian Forster. #2120
  * Write Prometheus plugin: A memory leak has been fixed. Thanks
    to Ruben Kerkhof.
- additional changes from version 5.7.0
  * Documentation: The Turbostat plugin section has been improved.
    Thanks to Florian Forster
  * Documentation: The semantics of the "TypesDB" option have been
    improved. Thanks to Florian Forster.
  * collectd: A generic interface for parsing the text protocol has
    been added. Thanks to Sebastian Harl. #1749
  * collectd: Threads now get named, making them easier to track
    using tools such as top, ps, etc. Thanks to Manuel Luis
    Sanmartín Rozada and Marc Fournier. #547
  * AMQP plugin, Write Graphite plugin, Write Kafka plugin: The new
    "[Graphite]PreserveSeparator" option allows retaining the
    default dot separator rather than escaping it. Thanks to
    Florian Forster. #419
  * Battery plugin: A StateFS backend for gathering statistics has
    been added. Thanks to Rinigus. #1795
  * CPU plugin: CPU aggregation on AIX was fixed. Thanks to Chao
    Yang. #1957
  * Collectd::Unixsock: Fractional seconds support has been made
    more robust. Thanks to Matthias Bethke. #2052
  * DPDKStat plugin: This new plugin collects DPDK interface
    statistics. Thanks to Maryam Tahhan, Harry van Haaren, Taras
    Chornyi and Kim Jones. #1649
  * gRPC plugin: The "DispatchValues" option has been renamed to
    "PutValues". Thanks to Florian Forster.
  * HDDTemp plugin: The 32 devices limit has been removed. Thanks
    to Benjamin Gilbert. #631
  * Hugepages plugin: This new plugin reports the number of used
    and free hugepages on Linux. Thanks to Jaroslav Safka, Maryam
    Tahhan, Kim Jones and Florian Forster. #1799
  * Intel RDT plugin: This new plugin collects statistics exposed
    by Intel's Resource Director Technology . Thanks to SerhiyX.
    [#1970]
  * memcached plugin: The new "Address" option allows connecting to
    a different server than specified by the "Host" option. Thanks
    to Pavel Rochnyack. #1975
  * nginx plugin: Support for reporting failed connections has been
    added. Thanks to Pavel Rochnyack. #1609
  * Perl plugin: Significant internal reworking has been made. The
    new "RegisterLegacyFlush" option has been added. Thanks to
    Pavel Rochnyack. #1731
  * PostgreSQL plugin: Timestamps are now RFC 3339-formatted local
    time. Thanks to Igor Peshansky and Dave Cunningham. #1918
  * Processes plugin: Internal performance improvements have been
    made. Thanks to Pavel Rochnyack. #1980, #1981
  * RRDCacheD plugin: The plugin now tries to reconnect upon failed
    operations. Thanks to Sebastian Harl. #1959
  * SpamAssassin: The plugin can now run in Perl's "tainted mode"
    ("-T"). Thanks to Akos Vandra. #1962
  * Tail plugin: Support for calculating latency distribution of
    matching values has been added. Thanks to Pavel Rochnyack and
    Florian Forster. #1700
  * Tail plugin: The new "GaugePersist" option has been added.
    Thanks to Florian Forster. #2015
  * Target:Set, Target:Replace, Match:RegEx: MetaData support has
    been added . Thanks to Igor Peshansky. #1922, #1923, #1930
  * turbostat plugin: The new "LogicalCoreNames" option allows
    switching to per-core naming rather than per-CPU. Thanks to
    Brock Johnson. #2056
  * virt plugin: The new "BlockDeviceFormat" and
    "BlockDeviceFormatBasename" options help controlling the names
    reported for block-device metrics. Thanks to Deyan Chepishev.
    [#2004]
  * Write Graphite plugin: A new "DropDuplicateFields" option has
    been added. Thanks to Michael Leinartas. #1915
  * Write Kafka plugin: The "Key Random" setting has been
    reintroduced. Thanks to Florian Forster. #1977
  * Write Log plugin: Support for formatting output in JSON has
    been added, using the new "Format" configuration option. Thanks
    to Igor Peshansky. #1924
  * Write Prometheus plugin: This new plugin publishes values using
    an embedded HTTP server, in a format compatible with
    Prometheus' collectd_exporter. Thanks to Florian Forster. #1967
- additional changes from version 5.6.2
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * collectd: The capability checking has been rewritten to be more
    portable. Thanks to Florian Forster. #2009
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * collectd-tg: Incorrect usage of "nanosleep()" has been fixed
    which caused the tool to sleep (almost) indefinitely. Thanks to
    Florian Forster.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * Build system: Detection of the Lua headers has been improved.
    Thanks to Ruben Kerkhof.
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * OpenVPN plugin: Gracefully handle empty configurations. Thanks
    to Pavel Rochnyack. #1932
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write HTTP plugin: A logic error when checking the correctness
    of the data set has been fixed. Thanks to Pavel Rochnyack. #1996
  * Write Kafka plugin: The "Key Random" config option has been
    fixed. Thanks to Florian Forster. #1977
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
  * ZFS ARC plugin: A duplicate metric has been removed. Thanks to
    Ruben Kerkhof. #1963
- additional changes from version 5.6.1
  * Build system: Unnecessary linking of the Write Graphite plugin
    with libyajl has been removed. Thanks to Marc Fournier.
    Debian#839771, #1976
  * collectd: A bug in the "FlushInterval" option that caused a
    segmentation fault in the Write HTTP plugin has been fixed.
    Thanks to Florian Forster. #1954
  * Apache plugin: A syntax error has been fixed. Thanks to Florian
    Forster.
  * cURL-JSON plugin: A segmentation fault that occurred when
    handling JSON with unexpected structure has been fixed. Thanks
    to Florian Forster. #1896
  * PostgreSQL plugin: Handling of "NULL" values in the
    "query_plans" and "query_plans_by_table" queries has been
    fixed. Thanks to Bernd Zeimetz. #1905
  * RRDCacheD plugin: Reconnection behavior has been added. Thanks
    to Sebastian Harl. Debian#657877
  * VServer plugin: Use of a deprecated API ("readdir_r()") has
    been fixed. Thanks to Sebastian Harl.
  * Write Graphite plugin: Make default values configurable at
    compile time again. Thanks to Florian Forster. #1953
  * Write HTTP plugin: A bug has been fixed that lead to flush
    callbacks being registered twice. Thanks to Florian Forster.
    [#1955]
- additional changes from version 5.6.0
  * Build system: An option to to avoid building the DF plugin
    against XFS has been added. Thanks to Ruben Kerkhof. #1878
  * Build system: Autoconf ? 2.60, a C99-capable compiler and
    pkg-config are now required. Thanks to Ruben Kerkhof.
  * Build system: Building with "-Werror" is now optional. Thanks
    to Ruben Kerkhof. #1222
  * Build system: Many compilation issues on non-Linux platforms
    have been fixed, leading to wider plugin support. Thanks to
    Ruben Kerkhof, Dagobert Michelsen, Havard Eidnes and Robert
    Viduya.
  * Build system: The configuration summary now also ends up in
    config.log. Thanks to Sebastian Harl.
  * collectd: All command-line options now override global options
    from the config file. Thanks to Sebastian Harl. #366
  * collectd: A number of unit tests for commonly used functions
    have been added. Thanks to Florian Forster.
  * collectd: Plugins start up and read timeouts are now logged.
    Thanks to Marc Fournier. #1293, #1254
  * collectd: Support for a timeout has been added to "FLUSH"
    callbacks. Thanks to Manuel Luis Sanmartín Rozada.
  * collectd: The "-T" command line switch now reports more errors.
    Thanks to Corey Kosak. #1642
  * collectd: The max size of value list elements
    ("DATA_MAX_NAME_LEN") has been doubled and is now configurable
    at build time. Thanks to Amy Lin, Florian Forster and Radu
    Brumariu. #1120
  * Set target: The "MetaData" option has been added. Thanks to
    Yves Mettier and Kevin Bowling. #1106, #1656, #1913
  * AMQP, Write_HTTP, Write_Kafka plugins: Support for libyajl &lt; 2
    has been added. Thanks to Florian Forster.
  * APC UPS plugin: Parsing of end markers has been fixed. Thanks
    to Florian Forster #617
  * APC UPS plugin: The "PersistentConnection" option has been
    added. Thanks to Florian Forster #617
  * ceph, DNS, Exec, IPTables, Ping, turbostat plugins: When
    running unprivileged, these plugins will now warn about
    insuffiscient permissions or capabilities(7). Thanks to Marc
    Fournier. #1530
  * Chrony plugin: This new plugin collects NTP data from the
    chrony NTP server. Thanks to Claudius Zingerli. #1548
  * cpusleep plugin: This new plugin measures time spent by CPU in
    deep sleep mode. Thanks to Rinigus. #1826
  * CPU plugin: The "ReportNumCpu" option has been added. Thanks to
    Fabien Wernli.
  * cURL, cURL-JSON, cURL-XML plugins: The new "Statistics" reports
    various per-HTTP connection timers. Thanks to Sebastian Harl.
    [#1004]
  * DBI plugin: The "Interval" option has been added to "Database"
    blocks. Thanks to Michal Bebjak.
  * Disk plugin: Support for FreeBSD has been added. Thanks to Xin
    Li, Brad Davis, Ruben Kerfhof and Kevin Bowling.
  * Empty Counter match: Support for derives has been implemented.
    Thanks to Florian Forster. #1813
  * GenericJMX plugin: Support for TabularData and the "PluginName"
    option have been added. Thanks to David Crane. #1290, #1291
  * GPS plugin: This new plugin reports the number of sattelites
    seen by and precision of a GPS receiver. Thanks to Nicolas
    Jourden. #1346
  * gRPC plugin: This new client and server plugin allows sending
    and receiving metrics using the gRPC protocol. Comparable to
    the UnixSock plugin, but using TCP and TLS. Thanks to Sebastian
    Harl and Florian Forster.
  * Interface plugin: Reporting dropped packets has been added.
    Thanks to Marc Falzon. #1555
  * Interface plugin: The "ReportInactive" has been added, letting
    users skip inactive network interfaces. Thanks to Rinigus. #1791
  * Interface plugin: The new, Solaris-only "UniqueName" option has
    been added. Thanks to Yoga Ramalingam. #1416
  * Lua plugin: This new language binding allows writing plugins
    using the Lua programming language. Thanks to Julien Ammous,
    Florian Forster and Ruben Kerkhof.
  * Memory plugin: Reporting of ARC memory on Solaris has been
    added. Thanks to Brian ONeill.
  * MQTT plugin: This new plugin sends metrics to and/or receives
    metrics from an MQTT broker. Thanks to Marc Falzon, Jan-Piet
    Mens, Nicholas Humfrey and Florian Forster. #805, #1124
  * MySQL plugin: Connection to the database server can now be done
    over SSL. Thanks to Brian Lalor. #1256
  * MySQL plugin: Monitoring slow queries has been added. Thanks to
    skob. #1773
  * MySQL plugin: mysql_bpool_pages-flushed has been renamed to
    mysql_bpool_counters-pages_flushed because the value is
    cumulative. Thanks to Marek Becka.
  * MySQL plugin: Support for Galera statistics has been added.
    Thanks to Rachid Zarouali. #1849
  * MySQL plugin: Support for InnoDB metrics was improved. Thanks
    to Aman Gupta. #1111
  * MySQL plugin: The "mysql_sort" type has been split into 3
    different types. Thanks to Pavel Rochnyack. #1592
  * Network plugin: Decryption error logging has been improved.
    Thanks to Pavel Rochnyack. #1735
  * Notify Nagios plugin: This new plugin sends notifications to
    Nagios as a passive check result. Thanks to Florian Forster.
  * NTPd plugin: The plugin now detects if the ntp daemon reports
    nanoseconds instead of microseconds. Thanks to Matwey V.
    Kornilov. #1783
  * OpenLDAP plugin: Several connection-related improvements have
    been made. Thanks to Marc Fournier. #1308
  * OpenLDAP plugin: Support for "simple authentication" has been
    added. Thanks to Marek Becka. #1087
  * Ping plugin: The "Size" option has been added, allowing the
    ICMP data payload size to be configured. Thanks to Witold
    Baryluk. #1395
  * PostgreSQL, DBI, Oracle plugins: The new "PluginInstanceFrom"
    option has been added. Thanks to Pavel Rochnyack. #1707
  * PowerDNS plugin: The recursor metrics have been updated to
    3.7.3 and missing rr types have been added. Thanks to Ruben
    Kerkhof.
  * Processes plugin: Counting of context switches was added for
    Linux. Thanks to Manuel Luis Sanmartín Rozada. #1036
  * Processes plugin: Improve reliability of thread counts on
    Linux. Thanks to Manuel Luis Sanmartín Rozada.
  * Python plugin: Minimal Python version requirement has been
    bumped to 2.6. Thanks to Ruben Kerkhof. #1864
  * Redis plugin: Several additional metrics are now collected.
    Thanks to Marc Falzon and Matteo Contrini. #1807, #1483
  * Sensors plugin: The "UseLabels" option has been added. Thanks
    to Christian Fetzer.
  * SMART plugin: The new "IgnoreSleepMode" option has been added.
    Thanks to Scott Talbert. #1770
  * SMART plugin: The new "UseSerial" option allows identifying
    devices in a stable way. Thanks to Scott Talbert. #1794
  * SNMP plugin: The "IpAddress" can now be used for instances.
    Thanks to Vincent Bernat. #1397
  * StatsD plugin: Latency calculation histogram is now able to
    shrink automatically to optimal size. Thanks to Pavel
    Rochnyack. #1622
  * StatsD plugin: The "CounterSum" option has been added. Thanks
    to Florian Forster. #929, #1282, #1311
  * UUID plugin: The plugin now also looks in in smbios system
    table and "/sys/class/dmi". Thanks to Ruben Kerkhof. #1490
  * virt plugin: The "PluginInstanceFormat" option has been added.
    Thanks to Ruben Kerkhof. #1100
  * Write Graphite plugin: The "ReconnectInterval" option has been
    added. Thanks to Toni Moreno and Florian Forster.
  * Write HTTP plugin: A KairosDB formatter has been added. Thanks
    to Aurélien Rougemont. #1809
  * Write HTTP plugin: Notifications are now handled by this
    plugin. Thanks to Florian Forster.
  * Write HTTP plugin: The "LogHttpError" option has been added.
    Thanks to vzubko.
  * Write HTTP plugin: The new "Headers" option allows setting
    custom HTTP headers in outgoing requests. Thanks to Brandon
    Arp. #1634
  * Write Kafka plugin: Key handling has been made more
    comprehensive and reliable. Thanks to Florian Forster,
    Pierre-Yves Ritschard and Vincent Bernat. #1765, #1695, #1393
  * Write Redis plugin: The "Database", "MaxSetSize", "Prefix" and
    "StoreRates" options have been added. Thanks to Brian Kelly and
    Sebastian Pfahl.
  * Write Riemann plugin: The new "BatchFlushTimeout" and "Timeout"
    option have been added. Thanks to Pierre-Yves Ritschard and
    Gergely Nagy.
  * Write Riemann plugin: This plugin now requires the
    riemann-c-client library, version 1.6.0+. This adds support for
    submitting values to Riemann over TLS. Thanks to Gergely Nagy.
    [#986]
  * Write TSDB, Write Sensu, Write Riemann, Write Graphite, Write
    TSDB plugin: TCP keepalive is now enabled, helping graceful
    recovery from unclean network disconnections. Thanks to Marc
    Fournier. #1549
  * XenCPU plugin: This new plugin collects XEN Hypervisor CPU
    stats. Thanks to Pavel Rochnyack. #1608
  * ZFS ARC plugin: Several new statistics have been added and a
    couple of obsolete ones removed. Thanks to Brad Davis, Brian
    ONeill and Ruben Kerkhof.
  * Zone plugin: This new plugin reads per-zone CPU usage on
    Solaris. Thanks to Mathijs Mohlmann and Dagobert Michelsen.
- additional changes from version 5.5.3
  * collectd: Write threads are stopped before shutdown callbacks
    are called. Thanks to Florian Forster. #1110
  * collectd: A compile error on AIX has been fixed: "MSG_DONTWAIT"
    is not available on AIX. Thanks to Chao Yang.
  * libcollectdclient: Lines printed to "STDERR" are now guarded by
    the environment variable "COLLECTD_TRACE". Thanks to Florian
    Forster. #105
  * collectd.conf(5): Various typos have been fixed. Thanks to Marc
    Fournier.
  * Build system: Detection of the Java environment has been made
    deterministic to allow for reproducible builds. Thanks to Marc
    Fournier. #1523
  * APC UPS plugin: Unavailable metrics are now skipped instead of
    reported as 0 (zero). Thanks to Florian Forster. #2025
  * Battery plugin: The minimum value has been removed from the
    power type to allow the plugin to report discharging batteries
    as negative power. Thanks to Florian Forster.
  * DBI, Oracle and PostgreSQL plugins: An error message when the
    type instance is truncated has been added. Thanks to Florian
    Forster. #4
  * cURL-JSON plugin: A possible segmentation fault when parsing
    unexpected JSON has been fixed. Thanks to Florian Forster. #1896
  * DF plugin: Compilation with xfsprogs ? 4.7.0 has been fixed.
    Thanks to Thomas Deutschmann. #1877
  * Modbus plugin: Build issues on FreeBSD have been fixed. Thanks
    to Florian Forster.
  * Network plugin: An error message has been corrected. Thanks to
    Florian Forster.
  * Network plugin: Handling of errors form secure memory
    initialization has been improved: the plugin fails gracefully
    now instead of calling "abort()". Thanks to Sebastian Harl.
  * Network plugin: The gcrypt library is only initialized when it
    is actually required due to the network plugin's configuration.
    Thanks to Florian Forster. #1902
  * Ping plugin: The init callback has been changed to be
    idempotent, fixing errors being reported on Solaris. Thanks to
    Florian Forster. #869
  * PostgreSQL plugin: The query_plans and query_plans_by_table
    queries have been improved to return 0 (zero) instead of "NULL"
    when not available. Thanks to Bernd Zeimetz. #1905
  * PowerDNS plugin: The "recursor command" has been fixed so
    PowerDNS can correctly parse all requested fields. Thanks to
    Ruben Kerkhof.
  * Python plugin: Handling of data sets with multiple data sources
    of different type has been fixed. Thanks to Sebastian Harl.
  * RRDCacheD plugin: Reconnection behavior after failed operations
    has been added. Thanks to Sebastian Harl. Debian#657877
  * Write Graphite and AMQP plugins: A bug that could lead to a
    missing null-termination has been fixed. Thanks to Markus
    Linnala.
  * Write Kafka plugin: Support for librdkafka 0.9.0 has been
    added. Thanks to Florian Forster.
  * Write Riemann plugin: Build issues on Solaris have been fixed.
    Thanks to Florian Forster.
- refresh patches:
  * collectd-fix_broken_perl-5.10.patch
  * collectd-split_README.patch
  * collectd-version.patch
- drop patch collectd-5.5.2-exec-no-output.diff: fixed upstream
- remove plugin write_riemann: not built anymore
- add new plugins chrony, cpusleep, hugepages, notify_nagios
- add lua-devel as BuildRequires and create a sub-package for
  the lua plugin
- add gpsd-devel as BuildRequires and create a sub-package for
  the gps plugin</changelog>
  <changelog author="jengelh@inai.de" date="1495713600">- Trim filler wording from descriptions, resolve orthographic
  errors, and shorten a find?delete call.</changelog>
  <changelog author="tchvatal@suse.com" date="1498132800">- Disable libdb collectd integration as we would like to reduce
  libdb exposure everywhere. There are other db backends in collectd
  anyway</changelog>
  <changelog author="tchvatal@suse.com" date="1498564800">- Remove all the always true conditionals for readability
- Convert to pkgconfig style dependencies
- Remove never applied patch collectd-pkgconfig_libnotify_add_gtk.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498564801">- Disable NUT plugin on older distros (broken NUT devel package)
- Make sure we build lvm plugin
- Disable turbostat plugin as it does not work with new kernels
  https://github.com/collectd/collectd/issues/2311
- Version update to 5.7.2:
  * Various small fixes around, notable fix for CVE-2017-7401
- Update buildrequires to include dependencies not detected by
  configure.ac (like python3)
- Disable Werror
- List all the modules in files and thus stick to --enable-all passed
  to configure to avoid having to name them all
- Switch to python3 from python2 as plugin can be built only once...
- Fix build on Factory
- Remove unused collectd-pthread.pc SOURCE file as it does not
  need to be done anymore</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1504872000">- Sort list of plugins bundled in main package, add line breaks
- Add BuildRequires for libsigrok and create a sigrok plugin
  subpackage
- Add 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
  Apply patch conditionally for libsigrok &gt;= 0.4.0, the API
  is different from the libsigrok 0.3.0 API.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1513166400">- Buildrequires for gpsd changed, upstream renamed the pkgconfig
  file in gpsd 3.17.</changelog>
  <changelog author="mardnh@gmx.de" date="1528372800">- Fix BuildRequires for collectd-web
- Make apache configuration files compatible with Apache v2.2 and v2.4</changelog>
  <changelog author="mardnh@gmx.de" date="1546084800">- Add patch:
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch</changelog>
  <changelog author="christophe@krop.fr" date="1555243200">- Update to 5.8.1:
  * collectd: Fix "BaseDir" option.
  * collectd: improve error handling, check return values.
  * Build System: use "kstat.h", when available.
  * Build System: Out-of-tree builds have been fixed.
  * Configuration: Error handling in the config parsing code has been
    improved.
  * collectd: The core daemon is now completely licensed under the
    MIT license.
  * Build system: Dependency on libltdl has been removed, support for
    libtool 1 has been dropped.
  Check the ChangeLog file for the complete list of changes.
- Add Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add avoid-pg-config.patch to use pkg-config instead of pg_config
- Refresh patches
- Drop Patches:
  * collectd-split_README.patch (merged upstream)
  * collectd-javac_target.patch (doesn't applies)</changelog>
  <changelog author="mardnh@gmx.de" date="1560427200">- Update to 5.9.0:
  * collectd: A new "UNKNOWN" state as the initial state of metrics has
    been added.
  * collectd: config parser: Improved error reporting on global options.
  * collectd: daemon: make plugin_dispatch_multivalue() obey write queue
    limits.
  * collectd: Macros "STRERROR" and "STRERRNO" have been added.
  * collectd: Plugin name field has been added to plugin context to
    improve error reporting.
  * collectd-tg: Use "CLOCK_REALTIME" for collectd-tg times.
  * AMPQ1 plugin: A new plugin to write to amqp1 protocol.
  * Chrony plugin: Ignoring late responses has been added.
  * CPUFreq plugin: Read number of p-state transitions and time spent in
    each p-state.
  * cURL, cURL-XML plugins: Option "Interval" has been added.
  * Exec plugin: Dynamic allocation of grname buffer has been added.
  * GPU NVML plugin: New plugin to collect NVIDIA GPU stats.
  * gRPC plugin: The "VerifyPeer" option for servers has been added.
  * Intel RDT plugin: Support for groups of PIDs has been added.
  * IPMI plugin: Config options "SELSensor" and "SELIgnoreSelected" have
    been added.
  * Modbus plugin: Support for 64 bit vals has been added, support for
    CDAB endian 32-bit modbus polls has been added.
  * Modbus plugin: The "Scale" and "Shift" metrics have been added.
  * Netlink plugin: Handle new counter from Linux kernel version 4.6+.
  * Network plugin: Option "BindAddress" has been added.
  * Ping plugin: An "AddressFamily" configuration option has been added.
  * OVS Stats plugin: Extended metrics "ovs-dpdk" have been added.
  * OVS Stats plugin: Support of bond interface and a "InterfaceStats"
    config option have been added.
  * PCIe Errors plugin: New plugin to read "PCIe" errors.
  * Processes plugin: Support for Linux Delay Accounting has been added.
  * Redis plugin: Keyspace "hitratio" metric has been added, metric
    "operations_per_second" has been removed, an option for connecting via
    UNIX socket has been added.
  * RouterOS plugin: Support for temperature and voltage data has been
    added, use MAC-address when Radio-name is missing.
  * RRDCacheD plugin: Time resolution has been improved to microseconds.
  * Sensors plugin: Checks for upper limit of "SENSORS_API_VERSION" have
    been removed, support for libsensors older than 3.0.0 has been
    dropped.
  * SNMP plugin: New options "PluginInstance", "TypeInstance",
    "TypeInstanceOID", "PluginInstanceOID", "FilterOID", "FilterValues"
    and "FilterIgnoreSelected" have been added.
  * SNMP Agent plugin: Multiple key indexes to snmp table and other new
    features have been added, refactoring, coverity scan issues have been
    fixed.
  * Swap plugin: Support for Linux 2.4 has been dropped.
  * Turbostat plugin: Configuration option "RestoreAffinityPolicy" has
    been added.
  * Turbostat plugin: New metrics "P-states", "Turboboost", "Platform
    TDP", "Uncore bus ratio" have been added.
  * Turbostat plugin: Support of reporting GPU power on SKL has been
    added.
  * virt plugin: Allow read "Hostname" from libvirt metadata.
  * virt plugin: Block info statistics for disk devices have been added.
  * Wireless plugin: A "bitrate" metric has been added.
  * Write Graphite, Write Kafka plugins: Support for Graphite 1.1+ tag has
    been added.
  * Write Prometheus plugin: Option "Host" has been added.
  * Write Stackdriver plugin: New plugin to write to Google Stackdriver
    Monitoring.
  * Write Syslog plugin: "write_syslog" plugin writes values lists as
    syslog messages.
  * collectd: collectdmon cannot exit command line options parse loop has
    been fixed.
  * collectd: Include "kstat.h" if available to provide "kstat_ctl_t",
    include "kstat.h" when available.
  * collectd: Parsing option for avoiding making BaseDir has been fixed.
  * collectd: Remove empty "cmd_listval_t" data structure and related
    no-op code.
  * collectd: src/daemon/plugin.c: Refactor plugin_load_file(),
    src/utils_format_json.c: Remove chatty debug messages.
  * collectd: Stop poisoning function in debug mode.
  * collectd: The number of allocations when parsing types.db has been
    reduced.
  * AMQP1 plugin: Potential memory leaks found via scan-build have been
    fixed, a typo in error log message has been fixed, cleanups.
  * Barometer plugin: Support to "libi2c-4.0" has been added.
  * DBI, Oracle, PostgreSQL plugins: Fixes and improvements.
  * Disk plugin: In linux, reset the disk when it disappears from
    "/proc/diskstats".
  * DPDK Events, DPDK Stats plugins: Buffer size for parsing lcores has
    been increased, a deprecation warning has been fixed, runtime config
    file path has been fixed.
  * GPS plugin: Build with gpsd version 3.18 has been fixed.
  * LUA plugin: A memory leak has been fixed.
  * MySQL plugin: Properly cleanup dropped MySQL connections.
  * Netlink plugin: Truncation warnings have been fixed.
  * NFS plugin: Message "Unexpected number of fields for NFSv4 server
    statistics: 62" has been fixed.
  * NFS plugin: Number of fields for "NFSv4" has been fixed.
  * Notify Email plugin: All notification parameters have been included
    into email.
  * NTPd plugin: Don't treat normal peers as refclocks, skip "0.0.0.0"
    hosts in ntpd plugin.
  * OVS Stats plugin: A macro to populate counters list has been added,
    value of "OpenFlow" has been corrected.
  * OVS Stats, OVS Events plugins: utils_ovs: Avoid potential access of
    freed memory, fixes.
  * Processes plugin: Compilation has been fixed when ps_delay() is not
    used.
  * Python plugin: A compilation warning with Python 3.7 has been fixed.
  * Redis plugin: Bugfixes, extended error reporting, persistent
    connections and parallel polling, ability to select db for queries has
    been fixed.
  * RRDTool plugin: Error reporting has been extended.
  * Sensors plugin: Support for humidity sensors has been added.
  * Sensu, OVS Stat, Turbostat, virt, OAuth, Write Prometheus, Intel RDT
    plugins: Compiler warnings have been fixed.
  * virt plugin: Compiler warnings, a segfault in libvirt, typo in error
    messages have been fixed.
  * virt plugin: Optional "virDomainGetCPUStats()" has been removed from
    main flow, cleanup.
  * virt plugin: Tracking of VM state changes has been fixed.
  * Write MongoDB plugin: Plugin dependencies have been fixed.
  * Write Redis plugin: Bug ""max_set_duration" deletes unexpected data"
    has been fixed.
- Drop patches (fixed by upstream):
  * 0001-gps-plugin-fix-build-with-newer-gpsd.patch
  * Removed-checks-for-upper-limit-of-SENSORS_API_VERSION.patch
- Add new subpackages:
  * plugin-pcie
  * plugin-write_stackdriver
  * plugin-write_syslog</changelog>
  <changelog author="cvoegl@suse.de" date="1574683200">- Update to 5.10.0 (jsc#SLE-9892)
  * turbostat plugin: Power metrics update for recent server CPUs. Thanks
    to Chris MacNamara. #3276
  * turbostat plugin: Fix warnings generated by the turbostat plugin.
    Thanks to Ryan Mccabe. #3340
  * ZFS ARC plugin: New cache values are now read on Linux. Thanks to
    Jan-Philipp Litza. #3247, #2843
  * connectivity plugin: monitor the network interface up/down status via
    the netlink library. Thanks to Andrew Bays. #2622
  * sysevent plugin: A new plugin that monitors rsyslog for system events.
    Thanks to Andrew Bays. #2624
  * procevent plugin: A new plugin that monitors process starts/stops via
    netlink library. Thanks to Andrew Bays. #2623
  * daemon: Check if plugin actually loaded before reporting configuration
    issues. Thanks to Pavel Rochnyak. #3217
  * daemon: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3181, #3214
  * Build System: Only include &lt;sys/sysctl.h&gt; when needed. Thanks to Ruben
    Kerkhof. #3298
  * Build System: Link to libnsl.so if needed for inet_ntop(). Thanks to
    Dagobert Michelsen. #3291
  * Build System: Remove double "without" added by commit b781871. Thanks
    to Fabrice Fontaine. #3261
  * Build System: fix compile time issues. Thanks to Matthias Runge.
    [#3179], #3242, #3245
  * Build System: Fix activation of snmp_agent. Thanks to Fabrice
    Fontaine. #3241
  * Build System: Fix bug that leads to CPPFLAGS gets overridden with
    CFLAGS when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * perl module: Collectd::Plugins::Openvz: Fix indentation of some
    closing curlies. Thanks to Christian Bartolomäus. #3239
  * tree-wide: Fix a few issues found with LGTM. Thanks to Ruben Kerkhof.
    [#3252]
  * tree-wide: fix ssnprintf wrapper. Thanks to Fabien Wernli.
    [#3237], #3232, #3235, #3236
  * tree-wide: Fix make check. Thanks to Ruben Kerkhof. #3306
  * CI System: Travis: switch to Bionic. Thanks to Ruben Kerkhof. #3307
  * CI System: Travis improvements for MacOS. Thanks to Ruben Kerkhof.
    [#3308]
  * MySQL plugin: Minor documentation improvements. Thanks to Christian
    Bartolomäus. #3288
  * Java plugin: Fix typo in an error message. Thanks to Matthias Runge.
    [#3285], #3286
  * sysevent plugin: Add a few missing calloc result checks in the
    sysevent_init function. Thanks to Andrew Bays. #3282
  * ZFS ARC plugin: A bug that caused the first to values to be skipped
    was fixed. Thanks to Jan-Philipp Litza. #3246
  * SysLog plugin: restore previous behaviour: fallback to info for
    unsupported level. Thanks to Fabien Wernli. #3236, #3238
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3228
  * GPU NVidia plugin: Fix build of the plugin. Thanks to Ruben Kerkhof.
    [#3320]
- Changes from 5.9.2:
  * syslog plugin: Don't fail if syslog loglevel doesn't match. Thanks to
    Fabien Wernli. #3236 #3238
  * collectd: Fix ssnprintf wrapper. Thanks to Fabien Wernli. #3237
  * rdt plugin: Fix compile time issues. Thanks to Matthias Runge. #3245
- Changes from 5.9.1:
  * collectd: regex match: Fix unexpected match with empty meta data .
    Thanks to Takuro Ashie. #3178
  * collectd: Fix return value or loglevel for several plugins. Thanks to
    Fabien Wernli. #3182
  * collectd: Add standard include early or _FILE_OFFSET_BITS will have
    definition ? . Thanks to Dagobert Michelsen. #3193
  * collectd: Use GCC-specific flags only when compiling with GCC. Thanks
    to Dagobert Michelsen. #3195
  * Use test_utils_proc_pids only when compiling the plugin that uses it.
    Thanks to Dagobert Michelsen. #3197
  * DNS plugin: Do not use headers from glibc. Thanks to Pavel Rochnyak.
    [#3156], #3145
  * collectd: Add missing definitions for libnetsnmpagent. Thanks to
    Dagobert Michelsen. #3203
  * collectd: Move Makefile rules for pid_test inside conditional for
    code. Thanks to Dagobert Michelsen. #3206
  * collectd: Recover setlocale() call in src/daemon/collectd.c do_init().
    Thanks to Pavel Rochnyak. #3214, #3181
  * collectd: Add snprintf wrapper for GCC 8.2/3. Thanks to zebity. #3153,
    [#2895], #3038
  * collectd: Fix bug that leads to CPPFLAGS gets overridden with CFLAGS
    when libxmms is enabled. Thanks to Dagobert Michelsen. #3207
  * Write_Riemann plugin: Copy MetaData to Riemann events in
    write_riemann. Thanks to Romain Tartière. #3158
  * virt plugin: Fix memory leak with libvirt MetadataXPath enabled.
    Thanks to Pavel Rochnyak. #3225, #3230
-Disabled Plugins due to missing dependencies:
  * lvm on Factory, Tumbleweed, Leap15.2 and SLES_15-SP2
  * gps and sigrok on SLES_15 and later
-Removed libstatgrab from buildrequires: only needed for non-Linux systems.
-Rebased patch 9e36cd85a2bb_sigrok_Update_to_support_libsigrok_0_4.patch
-Add new subpackages:
  * plugin-sysevent
  * plugin-procevent
  * plugin-uptime
  - ------------------------------------------------------------------</changelog>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Cleanup BuildRequires that are not actually in use:
  pkgconfig(devmapper),  pkgconfig(freetype2), pkgconfig(gail),
  pkgconfig(gdk-2.0),  pkgconfig(gtk+-2.0), pkgconfig(libart-2.0).</changelog>
  <changelog author="christian.voegl@suse.com" date="1593086400">- Update to 5.11
  * Adds buddyinfo, logparser, ubi, and write_influxdb_udp plugins
  * Remove lvm plugin
  * Multiple bugfixes/improvements
- update collectd-fix_collection_cgi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1600862400">- update to 5.12.0:
  * varnish plugin: Added varnish 6 support.
  * amqp1 plugin: New options to limit send queue length has been added.
  * mdevents plugin: New plugin to generate notifications about events
  * amqp plugin: Updated option to allow multiple hosts to support
    failover.
  * mysql plugin: Reporting of the fields Slave_IO_Running and
    Slave_SQL_Running has been added.
  * write_http plugin: libcurl default HTTP response has been moved to a
    buffer instead of stdout.
  * disk plugin: Provided an udev rule with ID_SERIAL based attribute so
    disk and partition data don't get mixed incorrectly in udev-based disk
    naming.
  * swap plugin: Implementation for NetBSD has been added.
  * netstat_udp plugin: New plugin ((currently NetBSD-only) to report UDP
    summary statistics has been aded.
  * smart plugin: SMART plugin has been extended with NVMe device
    functionality.
  * infiniband plugin: New plugin to collect metrics about IB ports has
    been added.
  * snmp plugin: Count option was added allowing to gather the number of
    table entries (matching given criteria) rather than their values.
  * cpu plugin: Implementation for NetBSD has been added.
  * irq plugin: Implementation for NetBSD has been added.
  * processes plugin: Implementation for NetBSD has been added.
  * entropy plugin: Implementation for NetBSD has been added.
  * netlink plugin: VFs statistics and link info has been added.
  * memory plugin: Implementation for NetBSD has been added.
  * curl_jolokia plugin: New plugin has been added to integrate jolokia to
    fetch jmx counters via HTTP/json. Thanks to Wilfried Goesgens. #2470
  * write_sensu plugin: IncludeSource option has been added.
  * intel_pmu plugin: Check for libjevents version has been improved.
  * python plugin: Error-handling code of PyType_Ready has been added.
  * collectd: Updated specfile for EL8. Thanks to Fabien Wernli. #3346
  * openvpn plugin: Parsing of empty fields has been fixed.
  * dpdk_telemetry plugin: Build issues has been fixed.
  * mqtt plugin: A problem with stuck after 20 (qos=1) messages has been
    fixed.
  * varnish plugin: Target in category for varnish 6 has been added.
  * mqtt plugin: Resubscribe after a reconnect. Thanks to Maciej
  * zookeeper plugin: Missing 3.5 mntr fields has been added. Thanks to
  * sensors plugin: The documentation has been improved. Thanks to Florian
  * types.db(5): Documentation of metric definitions has been improved.
  * intel_pmu plugin: The possible crash on plugin init has been fixed.
  * processes plugin: Size of reading buffer for /proc/stat has been
  * ubi plugin: Data source type has been fixed from counter to gauge.
  * intelrdt plugin: NaN values in csv output has been fixed. Thanks to
  * capabilities plugin: Conditionalized return type for microhttpd</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1608465600">- add mqtt plugin</changelog>
  <changelog author="max@suse.com" date="1614081600">- The bind plugin does not need bind-devel.</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1624881600">- add modbus plugin</changelog>
  <changelog author="jsegitz@suse.com" date="1630324800">- Added hardening to systemd service(s). Added patch(es):
  * harden_collectd.service.patch</changelog>
  <changelog author="christian.voegl@suse.com" date="1630497600">- Disabled the mqtt plugin for SLES and the modbus plugin for
  everything except Tumpleweed as the dependencies are not met in
  those distributions
- Added the modbus plugin as dependency to plugins-all</changelog>
</package>
<package pkgid="2375c8eaff54e8cdcd05a2c02db1dc4d6f422f045a7d1fcd0aab547ee5284e53" name="colord" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="04af942e4d93c2f526a4d3d4ff139642f45f975a4a2b1df86a9d0c3540ee1f14" name="colord" arch="ppc64le">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="1b52fa4e3eab8445d326b37d747bfd037a48cd9ec80d20894919692a5367327f" name="colord" arch="s390x">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="e2c985c023584a98c763cc4fbf22975614a6346e73cfe310f5a3c299cac9e118" name="colord" arch="src">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="856cab2c7bd99754e6aa3abfdbf9f4735a46966f82322457c909474fc29bf7f8" name="colord" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="bf1a1d0a6c66045e86120579b41eda5fe44794321f68ef58fedb09c119d37bc2" name="colord-color-profiles" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="12d459f8c3318c524e1b0087751105231d15eb6b81ca26e0e9334bdaa4798f30" name="colord-color-profiles" arch="ppc64le">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="c1ac258fa4faa7e25c5d6e76df752d9f9275236968f035bfd9e0e15b47d06e52" name="colord-color-profiles" arch="s390x">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="aec4aa7d8d2940192ce5056fc637707a5288a5f761e8acdff21fe92ea1506e6d" name="colord-color-profiles" arch="x86_64">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="0b4c7ede42162468d19cb0478c3258f00d9286778b6b960ceb7b7e3d5336aa25" name="colord-lang" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="150400.4.3.1"/>
  <changelog author="fezhang@suse.com" date="1488888000">- Apparmor profile (usr.lib.colord): Allow reading / writing
  /var/lib/colord/.cache (bsc#1024933).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1504785600">- Update to version 1.4.1:
  + Bugfixes:
  - Add back the meson -Denable-systemd=false configure argument.
  - Add the fallback rules for older PolicyKit versions.
  - Define PATH_MAX if not available.
  - Enable C99 support in meson.build.
  - Include all the files in the GIR target.
  - Include the correct file when using Colord-1.0.gir.
  - Use appropriate feature macro for realpath().
  - Use gio-2.0 when generating the VAPI.
- Changes from version 1.4.0:
  + New Features:
  - Port to the Meson build system.
  - Enable Travis CI for Fedora 25 and Debian Stretch.
  - Make PolicyKit, gusb and udev a hard requirement.
  + Bugfixes:
  - Add some experimental tools for the HueyCOLOR sensor as found
    in the P70.
  - Conditionally build documentation and man pages.
  - Correctly build the ICC transfer curve for Rec709.
  - Do not build the examples as part of the regular build.
  - Do not spin the Huey LEDs when the sensor is embedded.
  - Do not use /tmp to create profiles.
  - Fix the version numbers in cd-version.h to reflect reality.
  - Get the Huey status before trying to unlock.
  - Use a different Huey unlock code on the W700 laptop.
- Add meson BuildRequires, and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson Build System.
- Add gtk-doc and docbook-utils BuildRequires: new dependencies.
- Drop %glib2_gsettings_schema_* post/postun macros: the
  functionality is now covered by file triggers.
- Drop intltool and vala BuildRequires: no longer needed.
- Upstream rename of ColorHug-1.0.typelib file to
  Colorhug-1.0.typelib, thus its package has been renamed as well.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505131200">- Add pkgconfig(vapigen) BuildRequires and pass
  enable-session-example=false, enable-bash-completion=true,
  enable-systemd=true, enable-libcolordcompat=true,
  enable-argyllcms-sensor=true, enable-reverse=false,
  enable-sane=false, enable-vala=true, enable-print-profiles=true,
  enable-tests=false, enable-installed-tests=false,
  with-daemon-user=colord, enable-man=true and enable-docs=true to
  meson, ensure we build the feature we want.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506427200">- Add ulimit -Sv 2000000 entry before build, set ~2 GiB limit so
  that colprof is forced to work in chunks when generating the
  print profile rather than trying to allocate a 3.1 GiB chunk of
  RAM to put the entire B-to-A tables in.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package summaries. Replace old RPM shell variables.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507291200">- Collapse files section for gtk-doc.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520942400">- Update to version 1.4.2:
  + New Features:
  - Add cd_icc_set_created.
  - Add --enable-timestamps option for CREATED header.
  + Bugfixes:
  - Avoid buffer overflow when reading profile_id.
  - Fix the detection of duplicate EDIDs.
  - Make udev hwdb optional by using pnp.ids as fallback.
  - Raise _XOPEN_SOURCE to 700 to enable C99 on FreeBSD.
  - Refactor build directory selection.
  - Set cd-create-profile date to SOURCE_DATE_EPOCH.
- Pass new option enable-udev-rules=true to meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524398400">- Update to version 1.4.3:
  + Bugfixes:
  - Make cd_color_get_blackbody_rgb_full safer.
  - Update style of Meson build options.
  - Update warning about running daemon as root.
- Update options passed to meson following upstream changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1549886400">- Fix meson parameters: -Dargyllcms-sensor=true must be
  - Dargyllcms_sensor=true (boo#1124388).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1561550400">- Change BuildRequires to docbook-utils-minimal, otherwise the build
  pulls in half of texlive and all its dependencies. Only man pages
  and HTML API docs are generated, no need for PS/PDF generation.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1570536000">- Also allow /var/lib/colord/icc/ in AppArmor profile (boo#1112230)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571832000">- Update to version 1.4.4:
  + New Features:
  - Actually install the installed tests.
  - Allow building without the daemon.
  + Bugfixes:
  - Consistently search for spotread in $PATH.
  - Don't hard-require spotread to build argyll sensor.
  - Fix linker argument checks.
  - Include C header in Colorhug-1.0.gir.
  - Pass -DCD_COMPILATION to gir compiler.
  - Port manpages to xsltproc and DocBook 5.
- Replace docbook-utils-minimal with docbook5-xsl-stylesheets
  BuildRequires following upstreams port.
- Add _constraints file, avoid random buildfails for i586 and other
  arches.</changelog>
  <changelog author="rbrown@suse.com" date="1575460800">- Add add-spyderx.patch for datacolor SpyderX supprot (will be in
  version 1.4.5).
- Move colord-session.service and tmpfiles config from
  libcolord-devel to colord package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610020800">- Update to version 1.4.5:
  + New Features:
  - Add cd_icc_create_default_full
  - Add cd_icc_utils_get_adaptation_matrix
  - Add cd_mat33_is_finite
  - Add support for datacolor SpyderX
  + Bugfixes:
  - Check for errors from more sqlite calls
  - Fix cd_icc_load_data() annotation for the data array
  - Fix cd-sensor-dummy
  - Fix more annotation for data arrays
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible
  - Refactor opening of mapping database and try again if fails
- Drop add-spyderx.patch: Included upstream in new release.</changelog>
  <changelog author="suse-beta@cboltz.de" date="1610625600">- allow access to /usr/local/share/color in AppArmor profile (boo#1180898)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637409600">- Change to systemd-sysusers</changelog>
  <changelog author="jsegitz@suse.com" date="1639396800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_colord.service.patch</changelog>
  <changelog author="mgorse@suse.com" date="1663329600">- Add colord-CVE-2021-42523.patch: fix a small memory leak in
  sqlite3_exec (boo#1202802 CVE-2021-42523).</changelog>
</package>
<package pkgid="a5dccf6f702277dbe2603384f4f693d6d28659a04867db4765a3e02ab8c34f94" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="150400.3.3.1"/>
  <changelog author="rhafer@suse.com" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
</package>
<package pkgid="c0adb7300595d146ac00e99817746bd363e898e38d7b094f34ee2bccf41719db" name="conmon" arch="ppc64le">
  <version epoch="0" ver="2.1.5" rel="150400.3.3.1"/>
  <changelog author="rhafer@suse.com" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
</package>
<package pkgid="6f2cd2f3a10a76cad97c2385b70257bdac54bef5019644b5db4385be587cdc4b" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.5" rel="150400.3.3.1"/>
  <changelog author="rhafer@suse.com" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
</package>
<package pkgid="be472152617f5bfb5dbd91f802bda7553b56ac6d82891eda34a357ab9b5c24f4" name="conmon" arch="src">
  <version epoch="0" ver="2.1.5" rel="150400.3.3.1"/>
  <changelog author="rhafer@suse.com" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
</package>
<package pkgid="a47ad2a635b073a82b1f857f599c203060353950f9d18ee20b50be8f0f218405" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="150400.3.3.1"/>
  <changelog author="rhafer@suse.com" date="1582286400">- Update to v2.0.10 (bsc#1160460, bsc#1164390, jsc#ECO-1048,
  jsc#SLE-11485, jsc#SLE-11331):
  - journal logging: write to /dev/null instead of -1</changelog>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
</package>
<package pkgid="0b730e0ac8d6a131dc4f8cc6390aac565e055166eba8c6e566ba656b73e187e9" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="7021231d2888c8ab460d2103a72abd1c2d4f686bc6e18ef2e586b311029048c8" name="containerd" arch="ppc64le">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="c07a0a55b3293a42c4ce888d646f468bbd278a9bb7fac1d353cc0523898de905" name="containerd" arch="s390x">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="b819bce8b55d9a2dc16ffc302a5f4ed3b7695a6564b599e61e634261c84e31b2" name="containerd" arch="src">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="eb5d6b1e457cd02a0a066c899b4bafa8133e25aacf04556c0ea1d8441aaa7262" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="0043c851d2a625f952dd15920ade8a694926d9a118e8180178c831f551f7b956" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.12" rel="150000.79.1"/>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
</package>
<package pkgid="43c60eeb41913e47e8b0066d6a7c3cbbfe0c4927eec128d3a7ee0d4485ac14c0" name="containerd" arch="ppc64le">
  <version epoch="0" ver="1.6.12" rel="150000.79.1"/>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
</package>
<package pkgid="982947e5678e55fafd41e64331412e3351159d92e72c58aee38060fb19dc7a61" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.12" rel="150000.79.1"/>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
</package>
<package pkgid="30e2f29abfa80815a178eb4510a6318ec37235f5c79b455059260e758d614d93" name="containerd" arch="src">
  <version epoch="0" ver="1.6.12" rel="150000.79.1"/>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
</package>
<package pkgid="7cbe67a37afc579c15f55b08d688a00167875eb2a11647680b49ee03c06c5aa8" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.12" rel="150000.79.1"/>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1